security-policy: remove old policy, update intro
There was an old file, security-policy.md, which contained basic IT security guidelines for OlinData. The new security-policy directory replaces this, so we can remove the old one.
security-policy/README.md referred to the security-policy repository, but there is no reposity; it is part of the employee handbook. So we update the references to itself so it's acccurate.