SECURITY.md: Further clarify security adv. policy Security advisories should only be filed against official releases.