FR: Management of alerts/issues

[stephlocke]

There can be false positives in static code analysis tools that aren't always relevant. To reduce the noise, we should look at options to help manage this.

• Incorporate information on the config file capability of appcat analyze to support repo level management of applicable rules
• Discuss and agree an approach to providing some sort of configuration capability at the top level