Add instructions for README badges, update templates to major alias

[nwiltsie]

Description

This adds a fancy badge to the README showing the current GitHub release and linking to the release workflow:

It also adds instructions on how to add matching badges to calling repositories. Two points of frustration there:

• You have to fill in the absolute URL to the workflow; anything relative won't work.
• Public repositories can use the shields.io GitHub release badge, but private/internal repositories are limited to a simpler static badge:

Finally, I cleaned up the template workflows:

• I removed all of the Secrets are only required until... comments. It's just easier to keep using secrets.
• I commented-out the draft parameter to the finalization workflow. Users copying the template can easily uncomment it, but it makes the drafting behavior opt-in.
• I changed the workflow versions from v1.0.0 to v1. That'll eliminate the need for dependabot to bump anything except major versions. This is safe because it's our own workflow; any non-uclahs-cds users of these workflows should stick with the full version.

Closes #11

Checklist

• This PR does NOT contain Protected Health Information (PHI). A repo may need to be deleted if such data is uploaded.
  Disclosing PHI is a major problem¹ - Even a small leak can be costly².

• This PR does NOT contain germline genetic data³, RNA-Seq, DNA methylation, microbiome or other molecular data⁴.

• This PR does NOT contain other non-plain text files, such as: compressed files, images (e.g. .png, .jpeg), .pdf, .RData, .xlsx, .doc, .ppt, or other output files.

  To automatically exclude such files using a .gitignore file, see here for example.

• I have read the code review guidelines and the code review best practice on GitHub check-list.

• I have set up or verified the main branch protection rule following the github standards before opening this pull request.

• The name of the branch is meaningful and well formatted following the standards, using [AD_username (or 5 letters of AD if AD is too long)]-[brief_description_of_branch].

• I have added the major changes included in this pull request to the CHANGELOG.md under the next release version or unreleased, and updated the date.

Footnotes

1. UCLA Health reaches $7.5m settlement over 2015 breach of 4.5m patient records ↩

2. The average healthcare data breach costs $2.2 million, despite the majority of breaches releasing fewer than 500 records. ↩

3. Genetic information is considered PHI.
   Forensic assays can identify patients with as few as 21 SNPs ↩

4. RNA-Seq, DNA methylation, microbiome, or other molecular data can be used to predict genotypes (PHI) and reveal a patient's identity. ↩

[yashpatel6]

Looks good to me!