Bug-BOUNTY.md: we stop the bug-bounty end of Jan 2026

Slightly more context: https://mastodon.social/@bagder/115893088600630096 (and his recent posts in general)

Curl's main author has been vocal about the project getting overwhelmed by slop on their bug bounty platform for a while now. It's hardly a surprise that something had to change and the slop machine isn't going away any time soon.