You should be fine for PCI compliance as long as you are on a current release (Been there already, a few times). Also AlmaLinux already has an Announce mailing list ([email protected]) where they release update notifications (including Security releases) just like CentOS did.