report closer line numbers

[becojo]

Add a lines map to the GitHub Actions job and steps model to store the line number of relevant properties.

This will help rules highlight the line of the affected step/job property. For instance, known_vulnerability will highlight the step's uses instead of the first line of the step. The injection rule will flag either run or with.script depending on the type of injection.