Handbook: clarify vulnerability reporting
Add clarification of the vulnerability reporting: special considerations for confidential issues, how to request to enable private advisories.
Also add related FAQ entries.
Signed-off-by: Marta Rybczynska marta.rybczynska@eclipse-foundation.org