Update the security developer workflow to note that we create an MR targeting the most recent RC if we're working on a security MR between the 7th and 22nd of the month. This makes the procedure match reality.
cc @dappelt @jurbanc @kathyw