Add new `quality-queries` input

[mbg]

This PR adds a new quality-queries input to the init action. Fundamentally, this behaves the same as the queries input and propagates a list of queries to the CLI. The list of queries given in the quality-queries input is combined with the queries input and configuration file, as expected.

The intention here is that this will later allow us to filter SARIF results depending on which input the query responsible for the alert belongs to.

Merge / deployment checklist

• [ ] Confirm this change is backwards compatible with existing workflows.
• [ ] Confirm the readme has been updated if necessary.
• [ ] Confirm the changelog has been updated if necessary.