Generate a security.txt (RFC 9116) for /.well-known/security.txt so researchers know how to report issues.
/.well-known/security.txt