fix: change Services::security() param type

Author: kenjis

system/Config/Services.php

@@ -627,16 +627,14 @@ public static function router(?RouteCollectionInterface $routes = null, ?Request
      * secure, most notably the CSRF protection tools.
      *
      * @return Security
-     *
-     * @TODO replace the first parameter type `?App` with `?SecurityConfig`
      */
-    public static function security(?App $config = null, bool $getShared = true)
+    public static function security(?SecurityConfig $config = null, bool $getShared = true)
     {
         if ($getShared) {
             return static::getSharedInstance('security', $config);
         }
 
-        $config = config(SecurityConfig::class);
+        $config ??= config(SecurityConfig::class);
 
         return new Security($config);
     }

user_guide_src/source/changelogs/v4.4.0.rst

@@ -45,6 +45,8 @@ Interface Changes
 Method Signature Changes
 ========================
 
+- **Services:** The first parameter of ``Services::security()`` has been
+  changed from ``Config\App`` to ``Config\Security``.
 - **Routing:** The third parameter ``Routing $routing`` has been added to
   ``RouteCollection::__construct()``.
 - **Validation:** The method signature of ``Validation::check()`` has been changed.