Add FOC board triaging rules to make sure we have an open issue for each security advisory

## Done Criteria
Move from "rely on human to create an issue in `security-triage` for each private security advisory" to a more robust mechainm.

Agent ideally creating these issue or at the minimum is catching if we're missing any issues.

## Why Important
More robust than relying on a human to notice and act.

## User/Customer
FOC WG maintainers

## Notes
This is potential followup to https://github.com/FilOzone/tpm-utils/issues/16