Return specific files in repository_integrity_mismatch

[d-niu]

Right now, this rule simply returns a boolean on if there was mismatch or not. While reviewing results from guarddog scans, it's hard to evaluate this signal without the specific files that were mismatched. Even just the names of the files that were found in the distribution versus the source code would help.