RBP (reserved but public) policy update

[zmanion]

https://www.cve.org/Resources/Media/Archives/OldWebsite/cve/cna/CVE_Program_RBP_Policy_v1-2.pdf

RBP policy is being worked on, SPWG should review and manage updates in this repo.