Exclude repositories from `--fail-on`

[ribbybibby]

Some repositories house very simple libraries that have a low scorecard scores because they are not updated regularly (because they don't need to be) or otherwise score low despite being quite safe to use.

It would be useful if you could allow list repositories that you know you trust to avoid them failing the check.