docs: update security advisory credit to reporter's canonical attribution