security/vuxml: Update entry for security/doas

• Add a reference to OpenBSD's tech mailinglist that explains the issues with doas(1)'s environmetal security in further detail.
• Clarify the origins of the reporting sources and fix a grammar nit.

PR: 239629
Reported by: Sander Bos