Update on the vendor profile implementation

[Niels Thykier <niels@thykier.net>]

Hi

The short story - nearing completion, yay!

With today's work, I managed to implement the severity changing parts of
profiles.  This leaves us with (as far as I can tell) only the four
following items before it is complete:

 * Update the manual and manpage to include information about the
   profiles, syntax + semantics. (etc.)
 * Update tests to ensure all tags are covered by at least one profile.
 * Allow suppress tags together with profiles.
 * Update the tests to always use a development profile (e.g. ensure it
   does not pick up a user or system profile)

If you can see any other issues or items missing from the list, please
let me know.  Otherwise I will root for merging it into the master
branch (using --squash to avoid DoS'ing #debian-qa and the mailing list
this time) shortly after it is done.

~Niels