Add bug-disclosure email to all java projects' project.yaml.
Current master branch of https://github.com/spring-cloud/spring-cloud-netflix is broken, as is also indicated by the upstream project CI. Use 5ec430e instead, which is the latest commit that passed through the upstream CI and also "works over here".