Support for SARIF-based validation results

[david-waltermire]

Committer Notes

Add a -o option to CLI validation commands to generate a SARIF result at the provided location.

This PR incorporates a bunch of Metaschema Java and liboscal-java improvements, including:

• usnistgov/oscal-cli#288
• usnistgov/oscal-cli#174
• usnistgov/liboscal-java#169
• usnistgov/metaschema-java#373
• usnistgov/metaschema-java#368
• usnistgov/metaschema-java#367
• usnistgov/metaschema-java#365
• usnistgov/metaschema-java#363
• usnistgov/metaschema#659

This PR builds on the previous PRs, which should be merged before this PR.

All Submissions:

• [ ] Have you selected the correct base branch per Contributing guidance?
• [ ] Have you set "Allow edits and access to secrets by maintainers "?
• [ ] Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• [ ] Have you squashed any non-relevant commits and commit messages? [instructions]
• [ ] Do all automated CI/CD checks pass?

Changes to Core Features:

• [ ] Have you added an explanation of what your changes do and why you'd like us to include them?
• [ ] Have you written new tests for your core changes, as applicable?
• [ ] Have you included examples of how to use your new feature(s)?
• [ ] Have you updated all website and readme documentation affected by the changes you made?