Document SAST, Dependency Scanning JSON report format

Problem to solve

The reports generated by SAST and Dependency Scanning share a common report format. While these reports are unstable in that the contents of them are subject to change, we should document their formats as-is.

Further details

The output of this issue should be generic report examples from SAST and Dependency Scanning. These artifacts should be representative of each feature. The example reports will be used to enhance our documentation for these features.