Documentation for AppSec review of JiHu contributions and release certification

This merge request is a first pass at adding documentation for the processes involved for the AppSec team to review JiHu contributions and certify a monthly release.

Please keep in mind that not all of these procedures are set in stone and that we are still trying to figure out what approaches might work best. Feedback very much welcome.