Misc sarif updates

[ZacSweers]

This does a few cleanups around Sarif handling

• Add a level option to baseline merging
• Add some utilities for comparing results at a shallow level
• Mark merged lint baselines as suppressed
• Implement a new ApplyBaselinesToSarifs CLI for updating or merging sarif results based on a given baseline. This has two modes (see their docs) for use with either a baseline of suppressed issues (i.e. detekt/lint baseline files) or a baseline of the base branch that it's updating from. This will mark the final output with baselineData and suppressions accordingly.