Update DAST CWE schema `match_locations` to reflect their input

Proposal

Some match_locations defined in the DAST CWE schema accept either an expression, or a name_expression and value_expression. The schema allows for any location to be used with any input.

This MR proposes that the schema is updated to reflect what is and isn't allowed as input.