[Regulatory] Provide Guideline for running validation on top of nf-core reports

[apeltzer]

Guideline should only point users to their own respective institutional requirements, with some pointers on potential things to consider - will never be complete / cover all aspects.