Co-authored-by: Cursor <cursoragent@cursor.com>
Adds a draft security policy documenting a private reporting channel so researchers can responsibly disclose findings.