config: Support filtering on not_affected justification

[puerco]

When filtering SARIF results, vexctl should offer a setting to filter not_affected statements depending on their justification. For example I may want to filter only statements where software is not_affected but only when component_not_present.

Right now vexctl does not discriminate on justifications.