preflight chapter

fixes #4
we're also dedicating a full chapter to security checklist thingakajiggries, so this probably needs to point to that chapter instead of the moz list once it's PR'd in