Backport "Add the link to scala's security policy" to 3.5.2#21452