Filter#applies_to?: Return false if filter key is invalid

[rye]

This prevents an outright crash if you mess up a filter somewhere, and saves me time and brain.

It also makes a lot of sense; if vulnerability does not respond to the method you're calling, the filter clearly doesn't apply.