Extend security info

[schmijos]

We should link back to Nine for legal on the security page: https://docs.nine.ch/docs/category/legal-documents
Maybe also inform about their ISO 27001 cert. Add security contact and link to security.txt