consider and recommend testability in the privacy review process

We could add something to the https://www.w3.org/TR/security-privacy-questionnaire/ or make it part of the horizontal review check on privacy, but it might be useful to explicitly consider how to test the privacy conditions in a spec when we are reviewing it with the Privacy WG.