This commit adds the SPDX license header and modifications copyright to security policy files. Signed-off-by: Nicholas Walter Knize <nknize@apache.org>