Update security_baseline.md basic operating principle

added reference for automation and automatibility RE @marcelamelara comment.


Signed-off-by: Dana Wang <[email protected]>

process/security_baseline.md

@@ -54,7 +54,7 @@ To navigate these constraints, the following operating principles are adopted:
 
   * **Strong Bias Towards Automation and Automatability**
     * **Objective**: Enhance security by default and position security as an enabler rather than an inhibitor.
-    * **Approach**: Prioritize automation and automatability in all processes.
+    * **Approach**: Prioritize automation and automatability to manage dependencies and vulnerabilities more effectively.[[Know, Prevent, Fix](https://security.googleblog.com/2021/02/know-prevent-fix-framework-for-shifting.html)]
   * **Minimal, Achievable, and Practical Baseline Requirements**
     * **Objective**: Design a security baseline that balances software reliability, performance, cost, and security.
     * **Approach**: