Added SFDC report and DevSecOps case studies

Why is this change being made?

Does this MR meet the acceptance criteria?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what