Add a security contact

[dasanchez]

Follow-up from these action items: Adds a way for people to report security vulnerabilities affecting hypha.coop or our work, via security@hypha.coop.

Changes

• security.html
  • New /security/ page: what to report, what to include, what to expect, and a note to use the same address for vulnerabilities in our open-source repos instead of a public issue.
  • Not added to the main nav (no menu_title), so it stays a low-traffic utility page reached via the footer link, security.txt, or a direct link.
• _includes/sections/footer.html
  • One line in the policies region, on every page: "Found a security issue? Please report it to security@hypha.coop."
• .well-known/security.txt
  • RFC 9116 file with Contact, Policy (linking to /security/), Preferred-Languages, and Canonical. Expires is set to 2027-09-01 and needs renewing at least yearly.
• .github/SECURITY.md
  • Short policy so GitHub surfaces a "Report a vulnerability" link on the repo's Security tab. Lives under .github/, so Jekyll doesn't publish it.
• _config.yml
  • Adds security_email / security_email-hidden, following the existing email / email-hidden pattern used for hello@hypha.coop.
• README.md
  • Short Security section pointing to the new page/file and flagging the security.txt renewal.

[netlify]

✅ Deploy Preview for hyphacoop ready!

Name	Link
🔨 Latest commit	35d9d37
🔍 Latest deploy log	https://app.netlify.com/projects/hyphacoop/deploys/6ab2c41252f5bf0008a32664
😎 Deploy Preview	https://deploy-preview-577--hyphacoop.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[uditvira]

No concerns!