Update Code of Conduct and Security Policy

[andyleejordan]

Updates the readme, code of conduct and security policy per OSPO request.

I didn't have anything setup to auto renumber the links so I just...carefully made a new link to keep the numbering in order.

[github-actions]

Expectations

Thanks for your submission! Here's a quick note to provide you with some context for what to expect from the docs team and the process now that you've submitted a PR. Even if you've contributed to this repo before, we strongly suggest reading this information; it might have changed since you last read it.

This is a brief, high-level summary of what to expect from this process.

The team begins to review your PR if you request them to or if your PR meets these conditions:

• It's not a draft PR.
• It doesn't have a WIP prefix in the title.
• It passes validation and build steps.
• It doesn't have any merge conflicts.
• You have checked every box in the PR Checklist, indicating you have completed all required steps and marked your PR as Ready to Merge.

You can always request a review at any stage in your authoring process, the team is here to help! You don't need to submit a fully polished and finished draft; the team can help you get content ready for merge.

While reviewing your PR, the team may make suggestions, write comments, and ask questions. When all requirements are satisfied, the team marks your PR as Approved and merges it. Once your PR's merged, it's included when the site rebuilds.