Add third-party change management process
This MR adds a third-party change management process to meet compliance with CM.3.01 - Third-Party Change Management Workflow. Remediation for this control is being tracked in https://gitlab.com/gitlab-com/gl-security/compliance/compliance/issues/1028
Edited by walter