add wildcard disabled support

This allows a wildcard option to disable all unspecified rules by default. Useful for tasks that want to check only a few rules, without having to explicitly disable all other current and future rules.