Mention option to cherry-pick range in security/developer

This can be useful to people that didn't want to squash commits. This is fully supported by secpick since it just delegates to git cherry-pick which supports commit ranges.