Track potential adoption of OpenSSF Project Security Information Specification

[achrinza]

The OpenSSF Project Security Information Specification "provides a mechanism for projects to report information about their security in a machine-processable way."

This specification is currently a draft. Hence, we should wait and see how it progresses. This issue is to keep track of this OpenSSF initiative.

see: https://github.com/ossf/wg-identifying-security-threats
see: ossf/wg-metrics-and-metadata#19
see: https://docs.google.com/document/d/1Hqks2J0wVqS_YFUQeIyjkLneLfo3_9A-pbU-7DZpGwM/edit

#TODO: Difference between this and OSSF Security Insights 1.0 specification