doc: update security release onboarding

This change is helpful when publishing release announcements.

PR-URL: #42333
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: James M Snell <[email protected]>

Author: joesepi

doc/contributing/security-steward-on-off-boarding.md

@@ -6,6 +6,7 @@
   to the project and not to use/disclose to their employer.
 * Add them to the security-stewards team in the GitHub nodejs-private
   organization.
+* Add them to the [public website team](https://github.com/orgs/nodejs/teams/website).
 * Ensure they have 2FA enabled in H1.
 * Add them to the standard team in H1 using this
   [page](https://hackerone.com/nodejs/team_members).
@@ -16,6 +17,7 @@
 
 * Remove them from security-stewards team in the GitHub nodejs-private
   organization.
+* Remove them from public website team
 * Unless they have access for another reason, remove them from the
   standard team in H1 using this
   [page](https://hackerone.com/nodejs/team_members).