Also: * Add Security Policy to point vulnerability reports to Bugzilla * Update spec template * Update core team contacts