feat: STRA workflow

[DerekRoberts]

Handle as much of STRA paperwork as possible with a workflow. Collaboration with @paulushcgcj.

BC Gov Assessment Process https://www2.gov.bc.ca/assets/gov/government/services-for-government-and-broader-public-sector/information-technology-services/standards-files/imit_611_security_threat_risk_assessment_standard_specification.pdf

SECURITY THREAT RISK ASSESSMENT SPECIFICATIONS https://www2.gov.bc.ca/assets/gov/government/services-for-government-and-broader-public-sector/information-technology-services/standards-files/imit_611_security_threat_risk_assessment_standard_specification.pdf

ZAP Checklist https://github.com/0xRadi/OWASP-Web-Checklist

How to prepare for a STRA https://apps.nrs.gov.bc.ca/int/confluence/display/FSAAR/How+to+prepare+for+a+STRA

[webgismd]

I would also chat with @basilv on this too.. but good thing to consider what could be added :)