docs(security): SECURITY.md contact email bounces; document private vulnerability reporting
The current security contact email in the SECURITY.md file is bouncing, preventing external security researchers from reporting vulnerabilities. The issue proposes directing reporters to GitHub's private vulnerability reporting feature and suggests fixing or replacing the email address, along with documenting expected response times.