Enable SARIF report

[binkley]

Multiple references, including:

• https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning
• https://blog.convisoappsec.com/en/what-is-sarif-and-how-it-could-revolutionize-software-security/
• https://dzone.com/articles/how-to-get-nice-error-reports-using-sarif-in-githu

Gradle Checkstyle plugin has a SARIF option.

• Research option for Maven.
• Research what other plugins (Gradle and Maven) support SARIF.