docs: add SECURITY.md

docs: document nuget publication

vpkpp: fix directory traversal vulnerability

Packed files with nested directories labeled .. are able to extract to directories above the specified output directory.
This commit adds a safeguard to check whether the absolute path of the extracted file is above the specified output directory, and does not extract that file if so.

Co-authored-by: Elle Woods <ellewoods@tuta.io>

vtfpp: fix swizzling for xbox platform

cmake: allow sourcepp libraries to be built as dlls

python: add bindings to kvpp

vtfpp: ps3 orange box textures have reversed mips

vtfpp: fix dumb error breaking mip calculations

cmake: add EXCLUDE_FROM_ALL back to webm to fix python build