confidential security comments

GitHub now lets users with repository write access mark security advisory comments as confidential, giving maintainers a more restricted way to discuss sensitive remediation details.