Add information about reviewing Auth related code
What does this MR do and why?
We specify that Auth code has to be reviewed by Auth Engineer on the group page but this is not included in the Code review guidelines. This MR adds the information there.
It includes also information about the usage of CODEOWNERS, the Auth section was added there.