Security review of tool

### Describe the Feature

Some clients have high security bars and have strict processed when adopting new tools.

Is there a 3rd party security audit of atmos source code?

Is cloudposse soc2 compliant (this would also help with adopting atmos)?

### Expected Behavior

Lower risk

### Use Case

Adopting clients with higher security risk levels

### Describe Ideal Solution

Security audit

### Alternatives Considered

_No response_

### Additional Context

_No response_