Create requirements document for Best Practices Badge, Security Metrics and Security Scorecards

[kaywilliams]

Let's document the goals, customer scenarios and requirements from three separate yet related workstreams and see if it makes sense to pull these together under common infrastructure as time goes on.

Here is a document to begin capturing our thoughts.

https://docs.google.com/document/d/1qoCnDW6eo17pZv09P114D07YpgFD45AEB0lgY8ixOyY/edit#