Updated the formatting and structure of the security policy document, including changes to the reporting vulnerabilities section.