Merge "Document process for 'security-fix' releases"