update security policy, to use GitHub instead of email

update security policy, to use GitHub instead of email #1754