Improve security release documentation

I think the MailChimp step is not needed anymore because we automated it.

See merge request !1271