Report vulnerabilities through a private security advisory when available.

context-budgeter reads local files to produce reports. Do not attach reports containing private source code or secrets to public issues.