Security events documentation overrides Jenkins project security policy

[Daniel Beck]

Describe your use-case which is not covered by existing documentation.

https://github.com/jenkinsci/opentelemetry-plugin/blob/master/docs/security.md uses a magic file name that GitHub uses to let folks define security policies (e.g., how to report vulnerabilities).

This file should be renamed so that the org-wide policy from https://github.com/jenkinsci/.github/blob/master/SECURITY.md is no longer overridden e.g. in https://github.com/jenkinsci/opentelemetry-plugin/security/policy

Reference any relevant documentation, other materials or issues/pull requests that can be used for inspiration.

No response