cve_policy: update the bugtracker

Eclipse security bugracker has been created, so use it now.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

security/cve_policy.rst

@@ -24,10 +24,10 @@ How to Report a Vulnerability?
 
 If you think you have found a security issue in our distribution, please contact
 us immediatelly by posting a confidential issue in our bug tracker in a
-dedicated `security project <https://booting.oniroproject.org/security/bugtracker/-/issues>`_.
+dedicated `security project <https://gitlab.eclipse.org/security/oniro-core>`_.
 
 To do so, login into our issue tracker or create a new account if you do not have one
-yet. Click on `New issue <https://booting.oniroproject.org/security/bugtracker/-/issues/new>`_, then make sure to check the checkbox at the bottom 
+yet. Click on `New issue <https://gitlab.eclipse.org/security/oniro-core/-/issues/new>`_, then make sure to check the checkbox at the bottom 
 'This issue is confidential and should only be visible to team members with at least 
 Reporter access'. Please use the 'Issue' type of ticket and the associated template.
 Fill in the title, answer the questions in the 'Description' field.