Add Kustomize detector line mapping

[whitemerch]

Summary

• add a dedicated Kustomize detector that maps findings back to direct sources, generator entries, and transformer patch references
• add helper test wiring for subprocess kustomize rendering during detector package tests
• connect detector mapping to vulnerability-line attribution in the engine path

Test plan

• go test ./pkg/detector/kustomize/... ./pkg/engine/... -count=1
• $(go env GOPATH)/bin/golangci-lint run ./pkg/detector/kustomize/... ./pkg/engine/...

Notes

• stacked on top of PR Add Kustomize resolver preprocessor core #115
• scan activation and fixtures remain in follow-up PRs

[datadog-datadog-prod-us1-2]

🎯 Code Coverage (details)
• Patch Coverage: 53.39%
• Overall Coverage: 46.86% (+0.59%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 23a784b | Docs | Datadog PR Page | Give us feedback!}