Over at gemi.dev Acidus suggests a point of contact:
For the rest of you, I sincerely ask you to include contact information in a security.txt file, so good hearted people can contact you if they discover a security problem.
gemini://gemi.dev/gemlog/2022-02-16-use-security.txt.gmi
Clearly I fall into the "rest of you" category, so I added a security.txt file to my capsule.
Thanks for pointing this out!
~ew