[DRAFT] Java: add SHA-224 and SHA-384 to list of secure crypto algorithms

[jcogs33]

Description

Adds SHA-224 and SHA-384 as secure algorithms so that the java/potentially-weak-cryptographic-algorithm query no longer flags these uses.

Adding SHA-224 and SHA-384 aligns Java with other languages.

Note that SHA-224 may be deprecated soon based on NIST's most recent draft revision of Transitioning the Use of Cryptographic Algorithms and Key Lengths, so let me know if I should not add it here.

This PR is based on #18084.

Pull Request checklist

All query authors

• A change note is added if necessary. See the documentation in this repository.
• QL tests are added if necessary. See Testing custom queries in the GitHub documentation.

Internal query authors only

• Changes are validated at scale (internal access required).

[jcogs33]

DCA alerts look good. Adding SHA-384 as a secure algorithm removes 46 FP alerts from the OWASP benchmark.