chore: make security reporting template more visible (runfinch#1560)

* chore: add guidance for reporting in templates

Signed-off-by: David Son <[email protected]>

* chore: add reference to security in README

Signed-off-by: David Son <[email protected]>

---------

Signed-off-by: David Son <[email protected]>

Author: sondavidb

.github/ISSUE_TEMPLATE/bug_report.md

@@ -7,6 +7,10 @@ assignees: ''
 
 ---
 
+**Please do not report security issues through this template.** Refer to [Security](https://github.com/runfinch/finch?tab=security-ov-file#reporting-security-issues) for the proper reporting channels.
+
+---
+
 **Describe the bug**
 Briefly describe the problem you are having.
 

README.md

@@ -295,3 +295,9 @@ As the project gets a bit of momentum, maintainers will start creating milestone
 * Stability and usability improvement, ongoing
 
 If you'd like to chat with us, please find us in the `#finch` channel on the [CNCF slack](https://cloud-native.slack.com).
+
+# Reporting an issue
+
+If you encounter anything that seems wrong, please check out our [issues](https://github.com/runfinch/finch/issues) tab first — someone may have already encountered your problem! If it's there, please add to the existing issue thread.
+
+If you can't find an existing issue, feel free to open a new one. As a remninder, anything related to security should NOT go through regular reporting channels. Please refer to [Security](https://github.com/runfinch/finch?tab=security-ov-file#reporting-security-issues) for guidance on how to report such issues.