docs: Update security policy layout preferences

Author: ArPaN-DS

SECURITY.md

@@ -4,19 +4,19 @@ We take the security of your private career data, API credentials, and applicati
 
 ---
 
-## ◆ Public Repository Security Rules
+## Public Repository Security Rules
 
 To protect your personal data, never share or commit:
-▪ Your local `.env` file (contains LLM API keys and secrets).
-▪ Your local SQLite database `db.sqlite3` (contains candidate resumes, logs, and profile info).
-▪ Exported JSON profile data.
-▪ Uploaded resumes or generated application drafts (`tmp_uploads/` or `media/browser_sessions/`).
+- Your local `.env` file (contains LLM API keys and secrets).
+- Your local SQLite database `db.sqlite3` (contains candidate resumes, logs, and profile info).
+- Exported JSON profile data.
+- Uploaded resumes or generated application drafts (`tmp_uploads/` or `media/browser_sessions/`).
 
 *If you accidentally commit any secrets or API keys, rotate them immediately!*
 
 ---
 
-## ◆ Supported Versions
+## Supported Versions
 
 Security updates are actively applied to the following versions:
 
@@ -27,7 +27,7 @@ Security updates are actively applied to the following versions:
 
 ---
 
-## ◆ How to Report a Security Vulnerability
+## How to Report a Security Vulnerability
 
 If you discover a security bug or potential vulnerability in **JobScout-AI**, please **do not open a public GitHub issue**. Doing so exposes users to risk before a patch can be developed.
 
@@ -41,15 +41,15 @@ Alternatively, if the private advisory flow is unavailable, contact the primary
 
 ---
 
-## ◆ Secure Deployment Checklist
+## Secure Deployment Checklist
 
 Before exposing a JobScout-AI server over a local area network (LAN) or hosting it on a VPS:
-▪ Set `DJANGO_DEBUG=false` in your `.env`.
-▪ Generate a secure, 50+ character `DJANGO_SECRET_KEY` using `python generate_keys.py`.
-▪ Set `FIELD_ENCRYPTION_KEY` to encrypt API keys stored in the database.
-▪ Restrict `DJANGO_ALLOWED_HOSTS` and `CSRF_TRUSTED_ORIGINS` to trusted domains only.
-▪ Enable HTTPS and secure cookies.
-▪ Verify your setup by running the deployment security checks:
+1. Set `DJANGO_DEBUG=false` in your `.env`.
+2. Generate a secure, 50+ character `DJANGO_SECRET_KEY` using `python generate_keys.py`.
+3. Set `FIELD_ENCRYPTION_KEY` to encrypt API keys stored in the database.
+4. Restrict `DJANGO_ALLOWED_HOSTS` and `CSRF_TRUSTED_ORIGINS` to trusted domains only.
+5. Enable HTTPS and secure cookies.
+6. Verify your setup by running the deployment security checks:
    ```bash
    python manage.py check --deploy
    ```