Allow for setting a baseline

[dylanratcliffe]

It is important for people to be able to differentiate between a node that is compliant with a standard completely, and a node that is compliant, but only because it has some kind of approved deviation. We need a way to determine what these are and surface them in Kriterion.

Ideas:

1. Tell Kriterion about one certname per standard which should be considered to be the source of truth for resource parameters, then, if a node checks in with an unchanged resource but the parameters are different from those of the "golden" node, it gets highlighted as "compliant...ish" or something better. You get the idea