Report suspected vulnerabilities according to Astral's security policy.

For this repository's security boundaries and reporting criteria, see the setup-uv threat model.