Support verbose output of whitelisted CVE's

[nabadger]

At the moment klar just tells us how many CVEs have been whitelisted.

It would be useful to have an option to also say which CVEs were whitelisted.

Ideally build this into the existing json/table/standard output formats.

I'll most likely contribute a PR for this.

Thanks again