Cleanup error handing in ruleset package

Problem to solve

At the moment we use string concatenation to assemble error message.

Proposal

We should follow Go best practices and use errors.join instead.

Context: gitlab-org/security-products/analyzers/ruleset!59 (comment 2804790457)