Cleanup security policies

[gyro2009]

This pull request primarily updates documentation related to security processes and policies, with a focus on modernizing risk assessment practices and clarifying the responsibilities of security roles. The changes remove references to CVSS scoring in favor of a new risk assessment approach, update terminology, and improve clarity in several policy and guidance documents. Additionally, there are minor dependency and formatting updates.

Security Process and Risk Assessment Updates:

• Replaced the CVSS-based risk assessment with a new approach using Inherent, Residual, and Target risk measures in ManagingSecurityConcerns.md. This includes updated definitions, process steps, and examples, and removes the detailed CVSS scoring section and its reference document. The process now emphasizes tagging risks appropriately and clarifies escalation procedures. [1] [2] [3] [4]
• Updated the Security Champion responsibilities to focus on understanding and using security training and testing tools, rather than requiring expertise in pen testing or formal security qualifications. [1] [2]

Policy and Guidance Formatting Improvements:

• Removed the CVSS Scoring Guidance link from the main security policy index, reflecting the move away from CVSS as the standard.
• Improved table formatting for environment timeouts in the pipelines baseline policy and for step-by-step guidance in open coding documentation for better readability. [1] [2]

Dependency Update:

• Updated the markdownlint-cli development dependency in package.json from version 0.45.0 to 0.48.0.

[snyk-io-eu]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[LRileyUKHO]

Looks Great to lil old me!