Create tracked security issue from disclosure form

Security disclosure responses arrive without a tracked issue or unique ID, delaying triage and bounty decisions. Create issues and send reporter confirmations so SecOps can act faster and reporters hear back same day.