Update spec URLs

[csarven]

Some of the works herein are carried on by other W3C groups, hence, consider updating spec URLs to use latest URLs or mention of latest URLs, eg:

https://web-payments.org/vocabs/security
->
https://w3c-ccg.github.io/security-vocab/