Documents discourage of feature flags on security MRs

What does this MR do?

Adds documentation to state why feature flags are discouraged on security merge requests.

As part of gitlab-com/gl-infra/delivery#1739 (closed)