doc: add security notes section

README.md

@@ -62,13 +62,6 @@ Two workflows are set up.
 
 # Deployment
 
-Security Notes:
-  - no Continuous Deployment set for security reasons **(1)**
-  - no GPG signing for security reasons **(1)**
-
-**(1)** Act runner does not have sudo access, which prevents 
-from deploying via `dnf` and signing via `gpg`
-
 Some commands to deploy the RPM package on server:
   ```shell
   # Add Gitea repo to your repolist
@@ -84,3 +77,9 @@ Some commands to deploy the RPM package on server:
   dnf --nogpgcheck install netoik-rp
   dnf --nogpgcheck upgrade netoik-rp 
   ```
+
+# Security Notes
+
+For security reasons, act runners does not have sudo privileges and so there is:
+- **no** Continuous Deployment because act runners cannot use `dnf`
+- **no** GPG signing because act runners cannot use `gpg`