Updated the security policy to clarify supported versions, reporting procedures, and vulnerability definitions.