Add host validation, exceptions, and reporting.

Why is this change being made?

Updating VM overview to include an explanation of our host validation, the exception process (status), and elaborate on vulnerability reporting. This documentation is required per security compliance's GAP analysis of vulnerability management.

Does this MR meet the acceptance criteria?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what