Ref request/ticket: #124169

The current Wiz normalizer treats all failedPolicyMatches returned by Wiz as EXTERNAL_POLICY_FAILURE, without distinguishing between AUDIT and BLOCK enforcement methods.

As a result, an AUDIT policy match can currently contribute to the EXTERNAL_POLICY_FAILURE count and trigger the OPA policy for failure.

We want to segregation for this to avoid pipeline failures.