Updated the security policy to clarify supported versions and reporting procedures for vulnerabilities.