Document CVE triage procedures

Write a single document which comprehensively covers LTS and ELTS CVE triage procedures, including first-level triage (e.g., as performed regularly by front desk) and second-level triage (e.g., as performed by someone working on a specific package).

This issue probably relates directly to #72 .