Use rule short failure message as fallback for evaluation failure message

[eleftherias]

In some cases, for example when using the rego/deny-by-default evaluation engine, we expect the writer of the rule to set the evaluation failure message. If they don't, we currently default to "denied".

Instead, we should default to the short_failure_message if that is provided in the rule definition.