[Draft] Java: Add Android missing certificate pinning query (CWE-295)

[joefarebrother]

Adds query for missing certificate pinning in an android application.

Currently covers cases in which a network communication function (e.g. URL.openConnection()), but either no pins are declared in a network-security-configuration.xml file; or pins are declared but the URL used is not of a domain with a pin declared.
Does not yet handle other ways of implementing certificate pinning, such as through a TrustManeger or third-party libraries like OkHttp.