Document security vulnerability reporting process.

Minor fixes in other docs, and add OpenSSF badge.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>