docs: Mention Internet Bug Bounty in the security policy

[jannfis]

Mention our IBB collaboration in the security policy

Checklist:

• Either (a) I've created an enhancement proposal and discussed it with the community, (b) this is a bug fix, or (c) this is a chore.
• The title of the PR is (a) conventional with a list of types and scopes found here, (b) states what changed, and (c) suffixes the related issues number. E.g. "fix(controller): Updates such and such. Fixes #1234".
• I've signed my commits with DCO
• I have written unit and/or e2e tests for my change. PRs without these are unlikely to be merged.
• My builds are green. Try syncing with master if they are not.
• My organization is added to USERS.md.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[github-actions]

Go Published Test Results

1 871 tests   1 871 ✔️  2m 31s ⏱️
   118 suites         0 💤
       1 files           0 ❌

Results for commit 3db6470.

[codecov]

Codecov Report

Patch and project coverage have no change.

Comparison is base (5318977) 81.50% compared to head (3db6470) 81.50%.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #2642   +/-   ##
=======================================
  Coverage   81.50%   81.50%           
=======================================
  Files         133      133           
  Lines       19852    19852           
=======================================
  Hits        16181    16181           
  Misses       2836     2836           
  Partials      835      835           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.