Add standardized comment to new security issues

Your newly created security and audit issues lack a consistent triage note, leaving engineers without context. It adds a comment to qualifying issues so engineers can start triage within minutes.