Add SECURITY.md for vulnerability reporting guidelines and introduce TODO.md future ideas

Author: DefinetlyNotAI

SECURITY.md

@@ -0,0 +1,18 @@
+## Supported Versions
+
+| Version | Supported | Release Date |
+|---------|-----------|--------------|
+| 0.1.x   | ❌         | 7th Aug 2025 |
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please report it responsibly by contacting us at **security@example.com** (replace with your actual contact).
+
+- I will acknowledge all reports within 48 hours.
+- I aim to provide a fix or response within 14 days.
+- Once a vulnerability is verified, I will coordinate disclosure timelines with the reporter.
+- If the issue is declined (e.g., not reproducible or not a security risk), we will explain the reasons.
+- Please do not publicly disclose vulnerabilities until we have addressed them to avoid risks to users.
+  - [You can safely report a vulnerability here privately](https://github.com/DefinetlyNotAI/PyCTools/security/advisories/new)
+
+Thank you for helping us keep the project secure.

TODO.md

@@ -0,0 +1,3 @@
+| Item              | Description                                                                 | Priority | Version to Expect |
+|-------------------|-----------------------------------------------------------------------------|----------|-------------------|
+| RNG Customisation | Add more customisation options to the RNG functions and streamline it fully | High     | 0.3.0             |