SECURITY.md refresh

1. The current SECURITY.md points to a project that has been archived. 2. Also, I think pointing to security@lists.podman.io is probably not a good idea for the toolbox project, as it'll be the podman maintainers receiving toolbox issues. Could you please update the doc here likewise?