Add responsible disclosure link to CONTRIBUTING.