Clarified that custom templates provided via `--template` for `starapp`
and `startproject` are used as-is, adding a warning that malicious or
poorly constructed templates may introduce security issues.
Backport of 4e7a991c12a113229e0927974d3bf94ea04eecf6 from main.