docs: document create-python-app ↔ cpa-templates relationship

[ulises-jeremias]

Summary

Update README, SECURITY, CONTRIBUTING mirroring CNA ↔ cna-templates docs.

Acceptance criteria

• README links cpa-templates
• SECURITY lists catalog host
• CONTRIBUTING points template PRs to cpa-templates