Add FOSSA badges

[trask]

along with selective reordering and pruning, let me know if you have any preferences

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.98%. Comparing base (00b61a2) to head (319b8b1).
Report is 13 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #7094   +/-   ##
=========================================
  Coverage     89.98%   89.98%           
  Complexity     6685     6685           
=========================================
  Files           749      749           
  Lines         20191    20191           
  Branches       1977     1977           
=========================================
  Hits          18168    18168           
  Misses         1431     1431           
  Partials        592      592           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[jack-berg]

Before:

After:

Lot of real estate for security related things, but seems ok.

[trask]

I could do without the best practices badge, in retrospect I don't think that one is too meaningful (and now I know how to add clomonitor exemptions, and we can document in the exemption that we have the badge but we just don't display it on the readme)

[trask]

(hold on merging, I probably need to update the FOSSA link again as I move us over to CNCF's FOSSA enterprise account)

[jack-berg]

Just checking in on this

[trask]

@jack-berg this is good to go now