chore: inherit org security policy

[aljo242]

Removes this repo's SECURITY.md so it inherits the org default from cosmos/.github, which points at cosmos/security.

• Sends reporters to hackerone.com/cosmos. The live program is Immunefi.
• References security@interchain.io.

One policy instead of a copy per repo, so it can't go stale again.

[greptile-apps]

Confidence Score: 4/5

The change is non-blocking for runtime behavior, but it should not merge until equivalent security-reporting guidance is available through the repository's actual owning organization.

Summary

This PR removes the repository-local vulnerability disclosure policy so that reporting guidance can be managed centrally.

• Deletes the existing HackerOne and email reporting instructions.
• The named cosmos/.github fallback does not apply to a repository owned by cometbft.

_{Reviews (1) · Last reviewed commit: "chore: inherit org security policy"}

[greptile-apps]

Comments Outside Diff

These findings sit on lines the diff does not cover, so they could not be posted inline. Each one leaves this list once its file changes.

•  Policy Is Not Inherited SECURITY.md:33 ▶

  GitHub applies default community health files only to repositories owned by the same account. This repository is owned by cometbft, so deleting this file does not inherit the policy from cosmos/.github. If no equivalent policy exists under cometbft/.github, reporters will be left without vulnerability-reporting instructions. Please make the policy available through the owning organization before removing the local file.