Update missing rationale & implementation details for Governance criteria (#160)

* Update missing rationale & implementation details for Governance criteria

<title>

Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com>

* Update baseline/OSPS-GV.yaml

Co-authored-by: Ben Cotton <ben@kusari.dev>
Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com>

* Update baseline/OSPS-GV.yaml

Co-authored-by: Ben Cotton <ben@kusari.dev>
Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com>

* Update OSPS-GV.yaml

adjusted from feedback

Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com>

---------

Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com>
Co-authored-by: Ben Cotton <ben@kusari.dev>

Author: SecurityCRob

baseline/OSPS-GV.yaml

@@ -12,8 +12,17 @@ criteria:
       The project documentation MUST include the
       Roles and Responsibilities for members of the
       project.
-    rationale: # TODO
-    implementation: # TODO
+    rationale: |
+      Documenting project roles and responsibilities
+      helps project particpants, potential contributors,
+      and downstream consumers have an accurate
+      understand of who is working on the project
+      and what areas of authority they may have.
+    implementation: |
+      Document project participants and their roles
+      through such artifacts as members.md, governance.md, 
+      maintainers.md, or similar file within the source 
+      code repository of the project.
     control_mappings: 
       BPB: B-S-3, B-S-4
       OCRE: 013-021