[readme] Explicitly mention bug reports and how to report security vulnerabilities

Merge request reports

Loading