Add reference to EU CRA, especially annex I

[david-a-wheeler]

The EU CRA is large, but it might be reasonable to walk through CRA annex I.

For more about the CRA, see OpenSSF blog post on CRA part 1 and OpenSSF blog post on CRA part 2