feat: add javascript rule for google tag manager

[vjerci]

Description

Most of web frontend leaks to third parties in large corporations is done trough google tag manager which then passes it on third party or an analytics tool.

This pr adds a rule which detects sending sensitive data to gtm's dataLayer. Which is a strong signal for potential abuse.

Rule patterns:

patterns:
  - pattern: |
      dataLayer.push($<DATA_TYPE>)
    filters:
      - variable: DATA_TYPE
        detection: datatype
  - pattern: |
      window.dataLayer.push($<DATA_TYPE>)
    filters:
      - variable: DATA_TYPE
        detection: datatype

Related

• ticks checkbox Write JS Rules #504

Checklist

• I've added test coverage that shows my fix or feature works as expected.
• I've updated or added documentation if required.
• I've included usage information in the description if CLI behavior was updated or added.
• PR title follows Conventional Commits format