Be specific when using "certification"

[NoahKunin]

FedRAMP has brought up that "certification" has a specific legal meaning and it doesn't actually apply to what they do. We should potentially restructure what we're calling these things to accommodate the difference.

FedRAMP calls itself a "verification" but since we use that word elsewhere, that could get confusing. A potential solution is aligning with what our NIST colleagues are calling a "profile". I'll be working on this next week.