Update S2068: Credentials should not be hard-coded

[michalb-sonar]

RSPEC-2068

Current implementation only checks if variable is named "password" (or few different variants). It needs to be updated, so it also checks if the name contains password (like "dbPassword").

The message needs to be updated to point at the part that is noncompiant. Something along the lines:
"'password' detected in this variable name, review this potentially hardcoded password."