Add a triage section that says how severity is assigned and that
severity objections are answered in the advisory thread before
publication, and a disclosure note that maintainers request the CVE
through GitHub at publication time and keep the published advisory
consistent with the CVE record.
Claude-Session: https://claude.ai/code/session_01GRaNc5E88r41GUWt2Y3uiQ
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>