Add a note about reporting security issues

Since @kmike created a mailing list for security issues we should direct people there from the documentation.
Wording taken mostly from the Django docs: https://docs.djangoproject.com/en/dev/internals/contributing/bugs-and-features/#reporting-security-issues