Add some notes to security policy

site/content/contribute/site.md

@@ -7,6 +7,10 @@ description = "How to contribute to the Kerolox website."
 - TODO: Atkinson Hyperlegible Next
 - TODO: document how to report bugs and get help
 - TODO: document security policy
+  - CVE reporting policy
+  - dependency updating strategy
+    - npm-based stuff is under extra scrutiny
+  - automatic secret sanitation
 - TODO: cookbook for common Kerolox idioms
 - TODO: tag example pages by demonstrated concept