Provide CVE / CWE reference in warning messages

[schlichtig]

Provide CVE / CWE references and information in the warning messages.

Possible approach:

• [ ] Extend the DSL CrySL to allow for specifying CVE / CWE information
• [ ] Enhance / update existing rulesets
• [ ] Adapt the output of warnings of CryptoAnalysis