Modularize oscap compliance report parsing

We need to look at the scripts for VAT/CSV-Output for and refactor how we're parsing oscap compliance reports wherever necessary to:

• remove code duplication
• improve reusability
• improve our code coverage (adding unit tests)
• allow for easier local use/testing (this may not be possible for these jobs at the moment)