feat: add security policy contact details and create SECURITY-INSIGHT…

.github/SECURITY-INSIGHTS.yml

@@ -0,0 +1,19 @@
+name: ChainForge Security Insights
+
+contact:
+  email: security@chainforge.app
+  disclosure: https://github.com/ChainForgee/ChainForge/security/advisories/new
+
+policy:
+  url: https://github.com/ChainForgee/ChainForge/blob/main/SECURITY.md
+
+supported_versions:
+  - version: latest
+    status: supported
+  - version: "1.0"
+    status: unsupported
+
+languages:
+  - rust
+  - typescript
+  - python

README.md

@@ -160,6 +160,12 @@ For component-specific contribution guidelines, refer to the README in each `app
 
 ---
 
+## Security
+
+To report a vulnerability, email [security@chainforge.app](mailto:security@chainforge.app) or use [GitHub's private vulnerability reporting](https://github.com/ChainForgee/ChainForge/security/advisories/new). Please do not open public issues for security reports. See [SECURITY.md](SECURITY.md) for details.
+
+---
+
 ## License
 
 This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.

SECURITY.md

@@ -17,6 +17,7 @@ ChainForge handles sensitive humanitarian aid data and recipient PII. We take se
 
 ### How to Report
 
+1. **Email**: Send a detailed report to [security@chainforge.app](mailto:security@chainforge.app).
 1. **Email**: Send a detailed report to the maintainers at security@chainforge.app.
 2. **GitHub Private Disclosure**: Use [GitHub's private vulnerability reporting](https://github.com/ChainForgee/ChainForge/security/advisories/new) feature.