feat: update 2024 annual report

Signed-off-by: Andy Suderman <[email protected]>

Author: sudermanjr

wg-policy/annual-report-2024.md

@@ -5,6 +5,9 @@
 
 1. What work did the WG do this year that should be highlighted?
 
+  - [Shift Down Security Whitepaper](https://tag-security.cncf.io/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-May2022-v2.pdf)
+  - 2 KubeCon talks - NA + EU
+  - Policy Reports API
 <!--
    Some example items that might be worth highlighting:
    - artifacts
@@ -14,14 +17,15 @@
 -->
 
 2. Are there any areas and/or subprojects that your group needs help with (e.g. fewer than 2 active OWNERS)?
+  - n/a
 
 ## Operational
 
 Operational tasks in [wg-governance.md]:
 
-- [ ] [README.md] reviewed for accuracy and updated if needed
-- [ ] WG leaders in [sigs.yaml] are accurate and active, and updated if needed
-- [ ] Meeting notes and recordings for 2024 are linked from [README.md] and updated/uploaded if needed
+- [x] [README.md] reviewed for accuracy and updated if needed
+- [x] WG leaders in [sigs.yaml] are accurate and active, and updated if needed
+- [x] Meeting notes and recordings for 2024 are linked from [README.md] and updated/uploaded if needed
 - [ ] Updates provided to sponsoring SIGs in 2024
       - [$sig-name](https://git.k8s.io/community/$sig-id/)
         - links to email, meeting notes, slides, or recordings, etc