Update security policy for vulnerability reporting

Added a request for contact information in vulnerability reports.

Signed-off-by: caroline-suse-rancher <caroline.davis@suse.com>