A Security Contact on the App

The app now publishes a security.txt file, so anyone who finds a vulnerability has a documented way to report it and knows we will respond. This matches the vulnerability disclosure policy already published on our main site.