Update notes for submitted changes

* Migrate OSSNs to the security-doc repo