added instructions for responsible disclosure, and use of `git bisect` for regression testing, closed #2280