Improve "security reports" section in contribution docs.

Signed-off-by: Solomon Hykes <solomon@docker.com>