Mark RM.1.03 as Not Applicable

Why is this change being made?

This control was found to be not applicable to GitLab as GitLab is not a PCI Service Provider. As such, the control documentation is being updated to reflect that.

This MR replaces !36567 (closed), the pipeline for which kept failing.

Does this MR meet the acceptance criteria?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what