docs(*): create SECURITY.md

[lumirlumir]

This pull request includes several changes to the repository, focusing on configuration updates, documentation improvements, and a crucial code comment correction. The most important changes include the addition of a security policy, updates to the configuration sync file, and modifications to the changelog and a critical comment in the code.

Documentation Improvements:

• SECURITY.md: Added a comprehensive security policy detailing how to report vulnerabilities, the response process, best practices, and supported versions.
• CHANGELOG.md: Updated the header to "Change Log" and included links to releases and tags in GitHub.

Configuration Updates:

• .github/sync-client.yml: Added the SECURITY.md file to the sync configuration to ensure it is included in the repository's configurations.

Code Comment Correction:

• src/textlint-rule-allowed-uris.js: Corrected a critical comment to indicate that the filename must not be changed to index.js as it is used as a RULE ID.

[Copilot]

Pull Request Overview

This pull request improves repository documentation and configuration while addressing a critical code comment mistake.

• Added a comprehensive SECURITY.md outlining the security policy and vulnerability reporting.
• Updated .github/sync-client.yml to include SECURITY.md in the configuration sync.
• Corrected a code comment in src/textlint-rule-allowed-uris.js and updated the CHANGELOG.md header.

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
SECURITY.md	New file with detailed security policy and reporting steps.
.github/sync-client.yml	Updated to include SECURITY.md in the sync configuration.
src/textlint-rule-allowed-uris.js	Corrected a critical comment regarding the filename.
CHANGELOG.md	Header updated for clarity regarding the changelog.

[github-actions]

Labels have been automatically applied based on the Conventional Commits specification.🏷️

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 99.60%. Comparing base (8ff00af) to head (de82664).
Report is 1 commits behind head on main.

@@           Coverage Diff           @@
##             main     #193   +/-   ##
=======================================
  Coverage   99.60%   99.60%           
=======================================
  Files          11       11           
  Lines        1016     1016           
=======================================
  Hits         1012     1012           
  Misses          4        4           

Files with missing lines	Coverage Δ
src/textlint-rule-allowed-uris.js	100.00% <100.00%> (ø)

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8ff00af...de82664. Read the comment docs.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.