Revisit structure for detectors/policies

[bearer]

Revisit structure for detectors/policies

[markmichon]

Does it make more sense to group by policy rather than language? so policies/CR-001/shared, policies/CR-001/ruby/..., etc.

For example: if my multi-language project is leaking data to a logger (CR-001) in both ruby and js, the core rationale behind why this is a problem is shared by the policy. Only the implementation details differ by language.

[cfabianski]

Only the implementation details differ by language.

The remediation would also be a little bit different.

I'll spike this one up though and I will see what we end up with