docs: add security policy and codeowners file

Author: estefania-perez-dev

.github/CODEOWNERS

@@ -0,0 +1,18 @@
+# This file defines who is responsible for code in this repository
+# Users and teams are referenced by their GitHub usernames
+
+# Global owner
+* @estefania-perez-dev
+
+# Specific directory ownership
+/.github/ @estefania-perez-dev
+/frontend/ @estefania-perez-dev
+/backend/ @estefania-perez-dev
+/contracts/ @estefania-perez-dev
+/docs/ @estefania-perez-dev
+
+# Documentation files
+README.md @estefania-perez-dev
+CONTRIBUTING.md @estefania-perez-dev
+CHANGELOG.md @estefania-perez-dev
+LICENSE @estefania-perez-dev

.github/SECURITY.md

@@ -0,0 +1,29 @@
+# 🔒 Security Policy
+
+## Supported Versions
+Currently supporting security updates for the latest version only.
+
+## Reporting a Vulnerability
+**Please do NOT report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them via email to:
+📧 **iximilegacy@gmail.com**
+
+You should receive a response within 48 hours. If for some reason you do not, please follow up via email to ensure we received your original message.
+
+## Disclosure Policy
+When we receive a security bug report, we will:
+1. Confirm the problem and determine affected versions
+2. Audit code to find any similar problems
+3. Prepare fixes for all supported versions
+4. Release a security update for all supported versions
+
+## Comments on this Policy
+If you have suggestions on how this process could be improved, please submit a pull request or open an issue for discussion.
+
+## Scope
+This security policy applies to:
+- Smart contracts for textile certification
+- Artisan data protection systems
+- Payment and compensation infrastructure
+- Cultural information databases