CII -> OpenSSF

This is effectively a typo change since CII has disbanded in favor of OpenSSF.  But I'm not sure if a broader procedure needs to be followed here because it is a change to the charter.  I hope this is a really simple accept and merge.

Signed-off-by: Justin Cappos <[email protected]>

governance/charter.md

@@ -80,7 +80,7 @@ the following activities:
 * Security assessments of specific proposals or projects
 * Identify projects for consideration for CNCF
 * Cross-pollinate knowledge by participating and inviting people from other projects and TAGs to share security practices
-* Integrate relevant external standards, such as from CII or NIST, as part of educational resources and/or TAG processes
+* Integrate relevant external standards, such as from OpenSSF or NIST, as part of educational resources and/or TAG processes
 
 Given that the group is comprised of volunteers, specific requests from the TOC
 may be queued according to the bandwidth of the group. The co-chairs will