Add SecurityFix label
Add SecurityFix label

and also a list of supported milestones. The value is used by Pungi to
mark composes as supported. It would be nice to have these definitions
in the same location.

JIRA: COMPOSE-3044

release-engineering/productmd,release-engineering/productmd