feat(general): leverage SARIF helpUri for guideline and SCA link

[gruebel]

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Fixes #3432

• Depending on what kind of record it is, it will use either the guideline link or the CVE link to fill in the helpUri field

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[ankon]

Is this guaranteed to not end up with the help_uri being empty? That is forbidden by the same spec.

[Saarett]

@ankon That's a good catch, thanks! Would you like to contribute a short PR to fix this case? 😄
@gruebel FYI

[ankon]

Tried, but my python is rusty: #3542