Template: Minimal Vulnerability Disclosure Policy

[ruddermann]

This template is designed to be the minimum viable Vulnerability Disclosure Policy for an OpenJS Project. It meets the following criteria:

• Complies with ISO 29147 (Coordinated Vulnerability Disclosure).
• Able to use as-is with little/no customization.

A working draft can be found here: https://docs.google.com/document/d/1yqugQ0W5w-gSmS5_repndlxlqdc8UrNLlHSeFmEdNkQ

[SecurityCRob]

CRob from OpenSSF Vuln Disclosures WG here. Nice work team. Added small optional suggestion, otherwise, LGTM