docs(NIST 800-53, HIPAA Security): Updating excluded rules (cdklabs#320)

Closes cdklabs#119 
Closes cdklabs#120
Closes cdklabs#123
Closes cdklabs#124
Closes cdklabs#130
Closes cdklabs#201
Closes cdklabs#217
Closes cdklabs#294
Closes cdklabs#295
Closes cdklabs#298
Closes cdklabs#299
Closes cdklabs#300
Closes cdklabs#301
Closes cdklabs#302
Closes cdklabs#303
Closes cdklabs#304
Closes cdklabs#305
Closes cdklabs#306
Closes cdklabs#307
Closes cdklabs#308

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: dontirun

CONTRIBUTING.md

@@ -30,7 +30,8 @@ reported the issue. Please try to include as much information as you can. Detail
 - [ ] Testing
   - Unit test added (prefer not to modify an existing test, otherwise, it's probably a breaking change)
 - [ ] Docs
-  - **README**: README and/or documentation topic updated
+  - **README**: README updated if necessary
+  - **RULES**: RULES updated if necessary
 - [ ] Title and Description
   - **Change type**: title prefixed with **fix**, **feat** and module name in parens, which will appear in changelog
   - **Title**: use lower-case and doesn't end with a period