groups: remove security@kubernetes.io from distributors-announce
groups: remove security@kubernetes.io from distributors-announce

having trouble getting the reconciler to recognize member inclusion
directly vs. through a group when it comes to changing roles, I had
to do some manual config editing to get this change to take:

- add members from security directly to members,
  and remove them as owners
- remove the security@kubernetes.io group as a member
- swap the security members back to owners

kubernetes/k8s.io,kubernetes/k8s.io,kubernetes/k8s.io,kubernetes/k8s.io