workmode doc should explicitly request sec & priv questionnaire answers

[samuelweiler]

Assuming that the TAG wants answers to the privacy and security questionnaire in advance of design reviews, the workmode doc should say that rather than say merely "It may also be helpful to have a look at: ... Privacy and Security Self-Review Questionnaire"

https://tag.w3.org/workmode/