[Workflow] Update security_releases.md to avoid messing with `main` on security repo
Description
Let's update the security_releases.md
to avoid merging into/from main
on the security repo. We can just use security patch release branches.
Context
From this comment:
note: This is one of the big changes from the process in the VSCode Extension project. Instead of merging changes into the security project's
main
, we'll just work off of the patch release branch.
- Security project's
main
- This is set up to pull mirror from the main project.- Security project patch release branch - This is what we'll use to tag/publish a new security release. This will also the be the source branch when creating the upstream MR back to the main repo.
/cc @viktomas