(maint) For security release, email puppet-security-announce

If a given release has security implications, we want to make sure the
release announcement is also sent to the puppet-security-announce list.
Since this is intended as a low traffic, read-only list that contains
only security related events.