feat(policies): add support for SSL verification disabled

[elsapet]

Description

Support for SSL verification

• Policy triggers only when we have sensitive data types detected

Also adds parent to risk location for custom risk detections (the detectPresence case)

Code sample

user.gender_identity

class InsecureService
  def unverified_http_client
    http = Net::HTTP.new(uri.host, uri.port)
    http.use_ssl = true
    http.verify_mode = OpenSSL::SSL::VERIFY_NONE
    http
  end
end

Policy report

Checklist

• I've added test coverage that shows my fix or feature works as expected.
• I've updated or added documentation if required.
• I've included usage information in the description if CLI behavior was updated or added.
• PR title follows Conventional Commits format

[swarmia]

✅  Linked to AMA-3287 · SSL certificate verification disabled in an application processing sensitive data
➡️  Part of AMA-3280 · Write ALL Ruby custom detectors & policies
➡️  Part of AMA-2947 · OSS - Curio CLI