docs: add note on slop security advisories

Author: steveiliop56

SECURITY.md

@@ -16,6 +16,11 @@ Or send us an email at <security@tinyauth.app>.
 
 If AI tooling (LLMs, automated scanners, agentic assistants, etc.) helped you discover, analyse, or write up this issue, please say so in your report. This isn't a judgement - AI-assisted findings are welcome - but disclosing it up front helps maintainers calibrate how much additional verification a report needs, and tends to make the report itself clearer.
 
+> [!WARNING]
+> We accept security reports created with the assistance of LLMs, but we **do not accept reports generated entirely by LLMs**.
+>
+> Reports that show little to no meaningful human analysis or verification, such as directly copied LLM-generated descriptions, will be **closed** and **will not be considered for CVE assignment**.
+
 When submitting a report, please use the structure below so it can be triaged quickly.
 
 ---