docs: corrected Supported Versions, updated Scope

SECURITY.md

@@ -1,11 +1,32 @@
 # Security Policy
 
+> [!IMPORTANT]  
+> Up-to-Date contact information can be found in our [security.txt](https://vegancheck.me/.well-known/security.txt)! 
+
+
 ## Supported Versions
 
-Only the current released versions and the versions available online (on https://vegancheck.me) are in scope. 
+Only the current released versions and the versions available online (on https://vegancheck.me) are supported officially. Forks are not within our scope.
+
+## Scope of the Security Policy
+The Scope of this Security Policy includes:
+- analytics.vegancheck.me
+- api.vegancheck.me
+- dev.vegancheck.me *
+- grade.vegancheck.me
+- grades.vegancheck.me
+- mastobot.vegancheck.me †
+- preprod.vegancheck.me *
+- staging.vegancheck.me
+- vegancheck.me
+
+
+> [!NOTE]  
+> Entries marked with * should only be accessible via VPN. <br />
+> Entries marked with † should only be accessible via Authentification (e.g. Bearer Token).<br />
+> The full scope can be found on [philip.media Security Policy Scope](https://security.philip.media/scope.html).
 
-Also, [api.vegancheck.me](https://api.vegancheck.me), [grade.vegancheck.me](https://grade.vegancheck.me) and [grades.vegancheck.me](https://grades.vegancheck.me) are in scope. 
 
 ## Reporting a Vulnerability
 
-You can read more about reporting a vulnerability [here](https://philip-media.github.io/security-policy/vdp.html). Please also see our contact details in our [security.txt](https://cldsi.de/.well-known/security.txt).
+You can read more about reporting a vulnerability [here](https://security.philip.media/vdp). Please also see our contact details in our [security.txt](https://vegancheck.me/.well-known/security.txt).