Review security practices with team and reach out to projects

[tim-schilling]

• Review security team responsibilities with the security team (Matthias and Carlton, need to check the list)
• Define the "default" security.yml file for project in best-practices repo
• Reach out to projects and offer support with security issues if they adopt the security.yml file and pattern