Putting It All Together: A Secure RAG Checklist