Consider adding a section for risk assessment to the RFC template

[tschneidereit]

Over in #1, @ggreif highlighted that the RFC template doesn't include a section on risk assessment:

Should a proposal address some pain point, at the cost of potentially introducing other problems, one needs to elaborate the latter, and weigh in on their severity. One could argue that this belongs into the discussion of the proposal, but that thread is not a document.