This change also unifies the way we compare findings with each other in
`MergeReportsService` and `StoreScanService`.