chore(contributing): responsible disclosure

Ask to not use the issue tracker to disclose security problems