docs(security): enhance security vulnerability disclosure policy in SECURITY.md

[omen18]

Description

Enhances SECURITY.md with supported major version details (3.x) and response timeline guidelines.

[github-actions]

Pull Request titles must follow the Conventional Commits specification and have valid scopes.

Unknown scope "security" found in pull request title "docs(security): enhance security vulnerability disclosure policy in SECURITY.md". Scope must match one of: cpa, claude, codemod, db-*, db-d1-sqlite, db-mongodb, db-postgres, db-vercel-postgres, db-sqlite, db-d1-sqlite, drizzle, email-*, email-nodemailer, email-resend, eslint, evals, graphql, kv, kv-redis, live-preview, live-preview-react, live-preview-vue, next, payload-cloud, plugin-cloud, plugin-cloud-storage, plugin-ecommerce, plugin-form-builder, plugin-import-export, plugin-mcp, plugin-multi-tenant, plugin-nested-docs, plugin-redirects, plugin-search, plugin-sentry, plugin-seo, plugin-stripe, richtext-*, richtext-lexical, sdk, skills, storage-*, storage-azure, storage-gcs, storage-r2, storage-vercel-blob, storage-s3, tanstack-start, translations, ui, templates, examples(/(\w|-)+)?, deps.

feat(ui): add Button component
^    ^    ^
|    |    |__ Subject
|    |_______ Scope
|____________ Type

[omen18]

Security policy guidelines and timeline verified.