Clarify that OSPS-AC-02 applies primarily to self-hosted solutions (#151)

* Move OSPS-AC-02 to level 3 based on level criteria

Signed-off-by: Evan Anderson <evan@stacklok.com>

* Apply funnelfiasco's suggested wording change

Signed-off-by: Evan Anderson <evan@stacklok.com>

* Update baseline/OSPS-AC.yaml

Co-authored-by: Eddie Knight <knight@linux.com>
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>

---------

Signed-off-by: Evan Anderson <evan@stacklok.com>
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
Co-authored-by: Eddie Knight <knight@linux.com>

Author: evankanderson

baseline/OSPS-AC.yaml

@@ -50,8 +50,9 @@ criteria:
       the project's repository by limiting the
       permissions granted to collaborators.
     details: |
-      Configure the project's version control
-      system to assign the lowest available
+      Most public version control systems are configured
+      in this manner. Ensure the project's version control
+      system always assigns the lowest available
       permissions to collaborators by default when
       added, granting additional permissions only
       when necessary.