Expanded the security policy to include supported versions, reporting guidelines, response timelines, security scope, and best practices for users.