docs(security): add secure contributor and agent guidance (#2382)