security.txt is in wrong location and has old data

[ketumbra]

policy is from DIVD, should only be in .wellknown. I'll submit a PR for this