You should be fine for PCI compliance as long as you are on a current release (Been there already, a few times). Also AlmaLinux already has an Announce mailing list (announce@lists.almalinux.org) where they release update notifications (including Security releases) just like CentOS did.