Show only matches reachable from main application code

**Is your feature request related to a problem? Please describe.**
When analysing big applications (with lots of SDKs and libraries) you end-up with hundreds of matches from code that is never actually used on the main application.

**Describe the solution you'd like**
Let's say the application has a package `com.myapp`. I want to be able to tell quark-engine to only show me matches that can be xreffed back to the application main package.

For example:

The function `g` in `com.google.android` package matching the rule should be recursively xreffed to see if there is a valid code path coming from code in `com.myapp`.

I know this can be very hard since decompilation isn't perfect but could reduce the noise quite a bit.

**Describe alternatives you've considered**
Another simpler alternative would be to allow the user to specify the exclusions (e.g. which packages shouldn't trigger a match). Well this could be already achieved by filtering the packages from the report.

**Additional context**
Not sure if I explained it well enough