SYS.3.01 - Add testing criteria, policy reference
This MR:
- Adds testing criteria to the guidance section
- Adds context for why the testing criteria are sufficient
- Adds a policy reference section
Related to https://gitlab.com/gitlab-com/gl-security/compliance/compliance/issues/678