PSIRT runbook updates

This change is for https://gitlab.com/gitlab-com/gl-security/product-security/appsec/appsec-team/-/work_items/1460 and covers the following runbooks:

• PSIRT Case Lifecycle
• How to handle upstream security patches
• CVSS Calculation
• HackerOne Process