message: Clarify location of the security.txt in the app
  (obsoletes
diff: @@ -22,8 +22,8 @@ We provide security patches for the latest released minor version.
  For vulnerabilities which are **not** part of any hacking challenge
  please contact <bjoern.kimminich@owasp.org>. In all other cases please
  -contact our shop's "security team" at the address mentioned in our
  -`security.txt` file.
  +contact our shop's "security team" at the address mentioned in the
  +`security.txt` accessible through the running application.
  > Instead of fixing reported vulnerabilities we might turn them into
  > hacking challenges! You might receive a reward for reporting a
  