Security Update Policy
Status: TODO
Define:
- supported product versions
- security support period
- critical/high vulnerability response targets
- automatic vs manual update behavior
- emergency release procedure
- rollback procedure
- customer notification policy