feat: Ruby policy for insecure communication (SSL not enforced)

[spdawson]

Description

Add custom detection and associated policy, for failure to enforce SSL in a Rails application, when the application processes sensitive data.

Also: reworks the "insecure SMTP" Rails policy, to make this conditional on the detection of sensitive data.

Checklist

• I've added test coverage that shows my fix or feature works as expected.
• I've updated or added documentation if required.
• I've included usage information in the description if CLI behavior was updated or added.
• PR title follows Conventional Commits format

[swarmia]

✅  Linked to AMA-3288 · Insecure communication with application processing sensitive data
➡️  Part of AMA-3280 · Write ALL Ruby custom detectors & policies
➡️  Part of AMA-2947 · OSS - Curio CLI