Document known duplicate advisory clusters and triage steps referenced from SECURITY.md. Co-authored-by: Cursor <cursoragent@cursor.com>