Should mostly forward to [`scala-lang.org/security`](https://scala-lang.org/security) and mention that the domain is [RFC 9116](https://www.rfc-editor.org/rfc/rfc9116) compliant.