feat(report): SARIF 2.1.0 emitter for CI / code-scanning integration (#626)