State what the relay sees at runtime (authenticated submission reveals
which device hands an envelope to which address) instead of claiming it
never learns the sender, note where data is stored, drop the
"Signal-grade" label and add a non-affiliation notice, and document
that only internal audits and penetration tests have been done so far.
- SECURITY.md with the reporting address and expectations; README points to
security@sepot.cz and security.txt
- README: FCM is the Android default since 1.2.0 when no UnifiedPush
distributor is installed; status reflects the Play release
- the "F-Droid" channel is not available yet and is no longer listed
- CHANGELOG: unreleased fixes and security hardening
Julius Joska