Add a `security_contacts field` to OWNERS with just the github handle, and migrate the existing SECURITY_CONTACTS files over. Supports #56