Seth clarify access policy (take 2)

@ilyaf , @ernstvn review time again!

-added
link to roles
link to issues related to steps to remove production access
clarification about ci/cd access.