Add Spring Security upgrade instructions to documentation

### Issue description

From the weekly meeting, we noticed that while the rename.md file & associated script reference the new library names, these mappings were not explicitly called out in the upgrade notes.  This ticket is to add a blurb about spring security plugin, where it was combined, and the new package names.  