Contact: https://example.invalid/security-contact
# Replace with a monitored security mailbox and your production domain before publishing.