Audit comments for uuid-style resources updates (requires DiffSuppress strings)

[migara]

audit comment is part of the rule schema, and if the user only changes the audit comment but not any other parameters related to the rule, the state should not detect a diff.

[shinmog]

Assuming abandoning #76 then this just needs audit comments added to uuid-style resources.

With regards to this, I know that users can configure PAN-OS to not allow commits if an audit comment is not associated with a rule when it is changed, but I don't know this works in a few scenarios:

• if I rename a rule from A to B, but otherwise do not change the spec of that rule, do I need to configure an audit comment with A? B? Both? Neither?
• if I do not change the spec of a rule, but I move it within the rulebase, does it require an audit comment?