Good First Issue: Write unit tests for reporting.py

[ParzivalHack]

The existing tests/unit/reporting_test.py is missing coverage (and needs to be expanded): SARIF output structure validation, HTML output includes expected issue fields, severity filtering in console output, and edge cases