* docs: add top-level README * security is a thing * move charter and address feedback * move charter