improving match criteria debuggability

[acpana]

At present, we only record results that match a constraint match criteria:

https://github.com/open-policy-agent/frameworks/blob/3f237e2710faee505189afd605cfe75ed89dd446/constraint/pkg/client/template_client.go#L135-L140

We can improve the debuggability of the system by A) indicating that a constraint doesn't match for a review and B) any stats on time it takes to run the match for a constraint. Both of these can help with UX efforts in shift left case scenarios like https://github.com/open-policy-agent/gatekeeper/issues/2599