content: Comment out non critical TODOs

[lehors]

This is the next step into disposing of the TODOs in the threats and mitigation section.
It only leaves in a smaller set of TODOs that really need to be addressed for publication of SLSA 1.1.

The non TODOs are merely commented out so that they can still be considered in the future.

[netlify]

✅ Deploy Preview for slsa ready!

Name	Link
🔨 Latest commit	b4a8563
🔍 Latest deploy log	https://app.netlify.com/sites/slsa/deploys/66f26eab775def00086fc131
😎 Deploy Preview	https://deploy-preview-1152--slsa.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[marcelamelara]

LGTM, thanks @lehors ! How many critical TODOs are left at this point? They aren't displayed in the diff.

[TomHennen]

Thanks!

[lehors]

LGTM, thanks @lehors ! How many critical TODOs are left at this point? They aren't displayed in the diff.

Thanks @marcelamelara. Unfortunately it's not so easy to spot the TODOs that are left. You can see them on the threats and mitigations page of the deploy preview, after selecting the Draft version, if you open all the twisties and search for "TODO". I see 7 of them.
Most of them are about describing how a particular threat is being mitigated. This will take someone with more expertise than I have I'm afraid.

I'm happy to open an issue for each TODO left so that it makes it easier to track.