Add security responsibilities to list of maintainer responsibilities

[pshiu]

Need to ensure a summary of our maintainer responsibilities are accepted to be included in the list of cumulative maintainer responsibilities.

Should probably happen after #5 so it's clear when the maintainer vs BTR is responsible for backporting security fixes to named releases.

[feanil]

This is probably a new ADR on the Maintainers OEP with specifics.