Create private repo for CNA-internal tracking and storage

[ruddermann]

We need a private place to track the more sensitive work the CNA will handle. This repo will only be accessible to the CNA Points of Contact and key OpenJS personnel.

[bensternthal]

@ruddermann can I help move this forward?