Fix CODEOWNERS

Author: youngcoder45

.github/CODEOWNERS

@@ -1,10 +1,15 @@
 # Default owners for the whole repository
-* @TheCodeVerseHub/core
+# NOTE: GitHub team handles are case-insensitive but must match the team slug.
+* @TheCodeVerseHub/codeverse-linux-distro @TheCodeVerseHub/distro-maintainers
 
-# Area ownership (keep these lightweight and practical)
-/docs/ @TheCodeVerseHub/core
-/scripts/ @TheCodeVerseHub/core
-/configs/ @TheCodeVerseHub/core
-/iso/ @TheCodeVerseHub/core
-/pkgbuild/ @TheCodeVerseHub/core
-/src/ @TheCodeVerseHub/core
+# Ownership by area
+/.github/ @TheCodeVerseHub/distro-maintainers
+/SECURITY.md @TheCodeVerseHub/distro-maintainers
+
+/docs/ @TheCodeVerseHub/documentation
+
+/scripts/ @TheCodeVerseHub/distro-maintainers
+/configs/ @TheCodeVerseHub/distro-maintainers
+/iso/ @TheCodeVerseHub/distro-maintainers
+/pkgbuild/ @TheCodeVerseHub/distro-maintainers
+/src/ @TheCodeVerseHub/distro-maintainers

SECURITY.md

@@ -1,23 +1,23 @@
 # Security Policy
 
-## Reporting a vulnerability
+## How to report vulnerabilities
 
-Please report security issues **privately**.
-
-Preferred:
+Preferred (private):
 
 - Use GitHub **Security Advisories** ("Report a vulnerability" in the Security tab).
 
-If you cannot use private reporting:
+Fallback (public):
+
+- Open a GitHub issue **without sensitive details** and request a move to a private channel.
 
-- Open a GitHub issue **without sensitive details** and ask for a private contact.
+Do not post secrets, exploit code, or private user data in public issues.
 
 ## What to include
 
 - Affected component (e.g. installer, ISO build scripts, configs)
-- Reproduction steps or proof-of-concept
+- Reproduction steps or a minimal proof-of-concept
 - Impact assessment (what could an attacker do?)
 
 ## Response expectations
 
-We aim to acknowledge reports within a reasonable time and will coordinate a fix and disclosure timeline with the reporter when appropriate.
+We aim to acknowledge reports within a reasonable time and coordinate a fix and disclosure timeline with the reporter when appropriate.