Feature: remediation for json format

[laurentsimon]

It bloats the json format. We either remove it https://github.com/ossf/scorecard/blob/main/pkg/common.go#L66-L68, or provid a --show-remediation.

@spencerschrock wdut?

[spencerschrock]

I'm curious how this impacts existing (short) remediation: e.g. I think if you have an unpinned dockerfile, we currently suggest a hash

[github-actions]

This issue is stale because it has been open for 60 days with no activity.