Transfer security processes to the OpenSearch Software Foundation

[dblock]

What/Why

What are you proposing?

Currently security mailing lists and processes are administered with help from Amazon. For example, in https://github.com/opensearch-project/.github/blob/main/RESPONSIBILITIES.md#prioritize-security we say "Note that this repository is monitored and supported 24/7 by Amazon Security, see Reporting a Vulnerability for details." and security @ mailing list is managed by AWS.

1. Transfer all security processes and mailing lists to the OpenSearch Software Foundation.
2. Expand the security team to folks from other organizations.

What users have asked for this feature?

Since https://www.linuxfoundation.org/press/linux-foundation-announces-opensearch-software-foundation-to-foster-open-collaboration-in-search-and-analytics.

What problems are you trying to solve?

Security should be managed by a trusted and diverse community.

[varun-lodaya]

I will take this up and start the work.

[varun-lodaya]

PR - #223. Addresses the first issue, will add subsequent PRs separately.

[varun-lodaya]

Adding more maintainers to form core Security Response Team - #232