Updated the security policy to clarify supported versions, reporting vulnerabilities, and scope of responsibility.