FAQ Entry added for log4j2 CVE-2021-44228

[Tim Funk]

If I've mis-identified anything - let me know. We could point people to
this if we continue to get questions:

https://cwiki.apache.org/confluence/display/TOMCAT/Security#Security-Q13

-Tim