docs: point security reports to hackerone (#12368)

* use-hackerone-and-remove-cve-list

* link-to-ibm-hackerone

* add-release-note

* typo

Author: mendonk

docs/docs/Support/release-notes.mdx

@@ -89,6 +89,8 @@ For all changes, see the [Changelog](https://github.com/langflow-ai/langflow/rel
 
     Tool calling is enabled for the following Google Gemini 3 preview models:
     `gemini-3.1-pro-preview`, `gemini-3-pro-preview`, `gemini-3-flash-preview`, and `gemini-3-pro-image-preview`.
+    
+- Vulnerability reporting now uses HackerOne
 
 - Build components with **Langflow Assistant**