GitHub’s Bug Bounty overhaul adds fixed rewards, HackerOne submission limits, and VIP payouts of $30,000 or more.