Handbook: clarify vulnerability reporting

Add clarification of the vulnerability reporting: special considerations for confidential issues, how to request to enable private advisories.

Also add related FAQ entries.

Signed-off-by: Marta Rybczynska marta.rybczynska@eclipse-foundation.org