Add ability to override audit rule severity in AuditConfiguration

add test; add extra test for BadAriaRole too