Resolved SARIF level: if kind is SarifKind.FAIL, uses severity's SARIF mapping; otherwise SarifLevel.NONE.