Tracking issue for creating LFX crowdfunding account to accept bounties

The TSC discussed/agreed to create an LFX crowdfunding account to accept the Project Part of the Hacker One bug bounties.

This issue is to track/share progress on that. At this point I believe we need to do the following:

• Create an LFX Account that can be used to create the crowdfunding account.
  Currently they don't have any notion of teams so it needs to its own email
  • add email alias nodejs-lfx-bounty to https://github.com/nodejs/email/blob/main/iojs.org/aliases.json
  • create the account
  • add password to Node.js 1password account
• Let hacker one know which account to forward the $ to
• Define the governance/process for the project/TSC allocating the funds. Approval should
  be by TSC and TSC chair pushes button in LFX account to make payout after approved
  by the TSC. - PR for governance - https://github.com/nodejs/TSC/pull/1313
• Review how its working after 3 and 6 months

Review the remaining unchecked item against the completed checklist, especially the LFX account setup, the nodejs/email aliases.json entry, and the TSC governance PR #1313. Confirm how the crowdfunding account and bounty payouts have worked at the three- and six-month points; the issue is done when that review is recorded.