we should link to the argonaut security review from cds-hooks.org

[isaacvetter]

The Argonaut security review of cds hooks resulted in (a number of changes to the pre-1.0 specification as well as) a security review pdf report).

The report is detailed, considerate and independent and that security review process is an asset to the specification.

I'm not sure of the best location on the site to host / describe the report. It shouldn' be within the specification itself, because it's supporting material. Maybe a new header within the Community page? Something like: Argonaut Security Review: To mature the CDS Hooks specification to 1.0, the Argonaut Project conducted a independent security review of the specification, which identified and addressed a number of potential risks.