github: Update PR template with required fields for PCI compliance (#37049)

.github/pull_request_template.md

@@ -33,6 +33,15 @@ label to enable the backport bot.
 
 1.13.x
 
+<!-- heimdall_github_prtemplate:grc-pci_dss-2024-01-05 -->
+## Rollback Plan
+
+- [ ] If a change needs to be reverted, we will roll out an update to the code within 7 days.
+
+## Changes to Security Controls
+
+Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.
+
 ## CHANGELOG entry
 
 <!--