Provide json schema for `AnalysisResult` output

[tom--pollard]

This could also be versioned and validated(as is the case for package-feeds 'package' output) providing a reference for potential downstream consumers of the analysis results.