Update contributing documentation and the issue template with
instructions on how to report security vulnerabilities.

Closes gh-12509