Update results for 3 (at-risk) security-related assertions in Discovery

[k-toumura]

The following results have been updated from null to pass:

• 33: security-bootstrapping-endpoints
• 34: exploration-secboot-401
• 35: exploration-secboot-auth

I assumed that these could be pass if authentication is required to access /.well-know/wot (i.e. exploration service of self-describing Thing), for example:

 $ curl -v http://localhost:1880/.well-known/wot
...
> GET /.well-known/wot HTTP/1.1
> Host: localhost:1880
> User-Agent: curl/7.64.0
> Accept: */*
>
< HTTP/1.1 401 Unauthorized  <--- satisfies "exploration-secboot-401"
< Access-Control-Allow-Origin: *
< X-Powered-By: Express
< WWW-Authenticate: Basic realm="Authorization Required"  <-- satisfies "exploration-secboot-auth"
< Content-Type: text/plain; charset=utf-8
< Content-Length: 12
< ETag: W/"c-dAuDFQrdjS3hezqxDTNgW7AOlYk"
< Date: Fri, 09 Dec 2022 07:20:40 GMT
< Connection: keep-alive
...