BA2024 EnableSpectreMitigations - Need to separate guidance into separate messages

[schlaman-ms]

BinSkim is supposed​ to separate guidance for checks into zero, one or two separate error messages:

1. Report on any security issues in directly compiled code
2. Report on any issue discovered in statically linked/non-compiled content.

We separate these reports because the former category (directly compiled code) tends to be more actionable, and
the second requires other remediation strategies (such as updating a dependency) that entail additional risk of regression or are simply less under direct control of the binary owner.