Option to skip low confidence and/or low severity checks

**Is your feature request related to a problem? Please describe.**

For some dependencies OWASP dep checker finds CVEs with low confidence, I'd like to suppress them all by confidence level. This will allow concentrating on things that matter instead of filling the suppression file with stuff like https://github.com/apache/pulsar/blob/2285d02aa9957af7877b9d3d3c628a750d813ca7/src/owasp-dependency-check-suppressions.xml#L337-L354 and a few others in the same suppression file.

Also suppressing low severity (or by severity below level N) will allow more smooth introduction of the dep checker into the CI.

**Describe the solution you'd like**

Options for maven and gradle plugins to specify min confidence level and min severity level, autosuppress otherwise.
Do not show CVEs below these min on the report.

**Describe alternatives you've considered**

not using owasp dep checker