docs: fix README security policy link (#7029)