Allow banning of team IDs.

[tnek]

This adds the ability to ban by team ID using the teamID value read from MOLCodesignChecker. Banning by certificate or binary hash will take precedence over banning by team ID (e.x. an explicitly allowlisted binary with a banned teamID will still execute).

Some next steps (for followup PRs):

• Rename the shasum column - especially when we eventually introduce banning by CDhash as well.
• Read and use the teamID from the es_message_t instead, as it's theoretically possible to race MOLCodesignChecker's file parsing. This will involve refactoring and decoupling the control flow between SNTPolicyProcessor and SNTExecutionController, so I've put it off for a future followup PR.

Linked issue: #634

[russellhancox]

I think you need to handle the new event types in SNTSyslogEventLog.m too.