[Feature] Finding Suppression / "Won't Fix" with Justification

Let team members mark a finding as a false positive or accepted risk, with a required comment explaining why. Other team members can see this context. Prevents the same finding from being re-triaged over and over across scans.

This resembles how a regular security audit works. [Feature] Mark issues as "acknowledged"