feat(matches-definition): add generic check matches-definition

[straker]

There are a few checks we could replace with this if matches could handle things like "attribute is not empty" or "attribute is empty" type checks as well. Once we extend matches with role matching, there are a few more checks we can replace as well.

Closes issue: #2185

Reviewer checks

Required fields, to be filled out by PR reviewer(s)

• Follows the commit message policy, appropriate for next version
• Code is reviewed for security