docs: clarify security policy and reporting guidelines in SECURITY.md#4600

bjohansebas wants to merge 1 commit intowebpack:mainwebpack/webpack-cli:mainfrom

bjohansebas:securitybjohansebas/webpack-cli:securityCopy head branch name to clipboard