Revise SECURITY.md for Bug Bounty Program details (#424)

Expanded the OneKey Bug Bounty Program details, including submission guidelines, scope, threat model, and rules for reporting vulnerabilities.

Signed-off-by: abbie982 <abbiezhou@onekey.so>

Author: abbie982