Security and vulnerability disclosure

[Paste the vulnerability disclosure policy from deploy/SECURITY-STANDARD.md, section 9.]