chore: add security docs

[carderne]

Adds SECURITY.md and security page to the docs.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1c31c0e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 7b9a12df-c8ed-4275-a2ab-0e2fe8fd558f

📥 Commits

Reviewing files that changed from the base of the PR and between b13616d and 1c31c0e.

📒 Files selected for processing (1)

• docs/self-hosting/docker.mdx

✅ Files skipped from review due to trivial changes (1)

• docs/self-hosting/docker.mdx

📜 Recent review details

⏰ Context from checks skipped due to timeout. (4)

• GitHub Check: code-quality / code-quality
• GitHub Check: audit
• GitHub Check: Analyze (actions)
• GitHub Check: Analyze (javascript-typescript)

---

Walkthrough

This pull request adds a repository SECURITY.md file and a new docs/self-hosting/security.mdx page describing private vulnerability reporting, required report details, GitHub Security Advisory tracking, response timelines, CVSS 3.1 severity targets, coordinated disclosure, and patching only the latest released version line. It also updates docs navigation and adds links from the self-hosting overview and Docker documentation to the new security page.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is too brief and misses the required template sections like Closes #issue, checklist, Testing, Changelog, and Screenshots.	Expand the PR description to follow the template, including Closes #, the checklist, testing steps, a changelog summary, and screenshots if relevant.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise and accurately summarizes the main change: adding security documentation.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/add-security-docs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.