fix review findings for audit

.github/ISSUE_TEMPLATE/5_Bug.yml

@@ -27,6 +27,17 @@ body:
         Root cause / Impact / Notification required?
     validations:
       required: true
+  - type: textarea
+    attributes:
+      label: Problem notifications
+      description: |
+        Record whether notification is needed and why, including if not needed.
+        Identify affected parties. If notification is needed, record who was notified,
+        when and how, with a link to an issue comment with an explicit mention or another communication reference.
+        Listing a recipient alone does not record a performed notification.
+        For suspected vulnerabilities, follow the project's confidential reporting policy.
+    validations:
+      required: false
   - type: textarea
     attributes:
       label: Analysis results