Update CIS Profilev2 comment in AccessRules

[gene1wood]

What should we update this comment to now that docs/.well-known/mozilla-iam.json is no longer present in cis?

[gene1wood]

I noticed this comment while hoping to add a comment to the code with the default value of configuration.iam_well_known since it's encrypted in the Auth0 settings