Update SECURITY.md with new and missing CVE references - #1462

This pull request updates the SECURITY.md document to reflect the latest security advisories, including both published and draft advisories.

Changes made:

• Added missing CVE link:

  • Included the CVE reference [CVE-2026-64675](https://www.cve.org/CVERecord?id=CVE-2026-64675) to the existing GHSA-mmg6-p4pr-cj6h entry.

• Inserted new draft advisories:

  • Added 9 new draft advisory entries, ordered by the newest PR first, with details on descriptions, patched versions, and PR numbers. The new entries are:
    • GHSA-f23j: Command object action list resize heap use-after-free (1.7.0-rc2, Bugfix/command object action array action list #1461)
    • GHSA-rxvq: Cross-peer disclosure via BVLC length mismatch (1.4.6/1.5.2/1.6.1/1.7.0, fix: validate BVLC framing and improve error handling in dl_ip_recv #1451)
    • GHSA-9qx8: Silent decode failure in bacnet_octet_string_decode() (1.4.6/1.5.2/1.6.1/1.7.0, fix bacnet string decode to handle NULL store and return error when exeeding store capacity. #1440)
    • GHSA-gv7j: AtomicWriteFile access-method mismatch → RAMFS heap OOB (1.4.6/1.5.2/1.6.1/1.7.0, fix: handle file access method mismatch in atomic read/write file services #1439)
    • GHSA-gj7v: Router route-table Tx_Buffer overflow (1.4.6/1.5.2/1.6.1/1.7.0, fix: prevent buffer overflow in I-Am-Router-To-Network message #1438)
    • GHSA-hg85: Structured View subordinate-list[0] unbounded resize DoS (1.6.1/1.7.0, fix: add size limits for remotely writable BACnet array or list elements #1437)
    • GHSA-92q2: BACnet/SC hub never requires client cert (1.4.6/1.5.2/1.6.1/1.7.0, fix: require valid OpenSSL client certificate for websocket server connections #1436)
    • GHSA-gr74: Trailing MORE bit BACnet/SC header option → pre-auth OOB r/w (1.4.6/1.5.2/1.6.1/1.7.0, fix: handle incomplete option list when 'More Options Follow' flag is set #1435)
    • GHSA-jgm4: BACnet/SC node accepts self-signed hub cert → MITM (1.4.6/1.5.2/1.6.1/1.7.0, fix: disable self-signed hub certificates in BACnet/SC websocket clients by default #1434)

These updates ensure that the SECURITY.md document is current and accurately reflects the security posture of the project.