chore: update postinstall script (#2791)

.husky/install.mjs

@@ -0,0 +1,6 @@
+// Skip Husky install in production and CI
+if (process.env.NODE_ENV === 'production' || process.env.CI === 'true') {
+  process.exit(0);
+}
+const husky = (await import('husky')).default;
+console.log(husky());

SECURITY.md

@@ -1,23 +0,0 @@
-# Security Policy
-
-If you believe you have found a security vulnerability in docsify, please report it to us asap.
-
-## Reporting a Vulnerability
-
-**Please do not report security vulnerabilities through our public GitHub issues.**
-
-Send email to us via :email: maintainers@docsifyjs.org.
-
-Please include as much of the following information as possible to help us better understand the possible issue:
-
-- Type of issue (e.g. cross-site scripting)
-- Full paths of source file(s) related to the manifestation of the issue
-- The location of the affected source code (tag/branch/commit or direct URL)
-- Any special configuration required to reproduce the issue
-- Step-by-step instructions to reproduce the issue
-- Proof-of-concept or exploit code
-- Impact of the issue, including how an attacker might exploit the issue
-
-This information will help us triage your report more quickly.
-
-Thank you in advance.

package.json

@@ -115,8 +115,8 @@
     "docker:test": "npm run docker:cli -- test",
     "lint:fix": "prettier . --write && eslint . --fix",
     "lint": "prettier . --check && eslint .",
-    "postinstall": "opencollective-postinstall && npx husky install",
-    "prepare": "npm run build",
+    "postinstall": "opencollective-postinstall",
+    "prepare": "npm run build && node .husky/install.mjs",
     "prettier": "prettier . --write",
     "pub:next": "cross-env RELEASE_TAG=next sh build/release.sh",
     "pub": "sh build/release.sh",