Mapping references for OSSF SCM Best Practices guide

[trumant]

https://best.openssf.org/SCM-BestPractices/ relates heavily to many controls in the baseline. I propose we better illustrate that relationship by making the following changes

• [ ] Update the doc above to reference the Baseline controls these recommendations align to
• [ ] Consider updating the baseline framework references to include mappings from Baseline controls back to this guidance