website check: loosen security link check

A relative link is also sufficient draft because untested, want to see what GHA does for this PR