Do not report security vulnerabilities in public issues.

Use GitHub's private vulnerability reporting for this repository. Include affected versions, impact, and a minimal reproduction when possible.