cravex2-reachability: Implement rule tools triaging vulnerabilities

[pombredanne]

Code for base framework to create rules/policies in DejaCode CRAVEX and evaluate the rules

[TG1999]

We will have filters in VCIO and Dejacode both, users can pass filter like in VCIO {"risk_score"<2, "weighted_severity">1}.