dev-menu: add link to dev security