SECURITY.md refresh #708
Description
bubblewrap's SECURITY.md points to the no-longer maintained (apart from the release-* branches) c/common repo's SECURITY.md file which mentions emailing podman's security mailing list. So, podman's mailing list will end up receiving any security issues in bubblewrap.
Suggest having a separate email / reporting channel dedicated to bubblewrap.