New security content: Jenkins CNA, extended reporting guidelines

[daniel-beck]

https://jenkins.io/security/ has been updated over the past few months, specifically the sections 'How to Report a Security Vulnerability' and 'CVE Numbers Authority'. Those updates are not reflected in the Chinese translation.

Additionally, there's a new page at https://jenkins.io/security/reporting/ that does not appear to be translated.