docs(security): write down the vulnerability remediation policy

docs(security): write down the vulnerability remediation policy #2277