add some resources to the docs

[beckermr]

@jaimergp found this https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html

We should curate some trusted resources in the readme maybe?

[jaimergp]

Another https://github.com/ossf/wg-securing-software-repos