docs(ci): explain JavaScript materializer trust boundaries - #2095

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

Actions workflow (scheduled-security-scan.yml)

• ❓  trivy-fs-scheduled

View all branch alerts.