The `baseline` CLI doesn't allow specifying the base commit

[Changaco]

The bandit-baseline command currently only supports checking against the first parent commit, this doesn't allow testing an entire branch / pull request in a CI build.

Solution: a new argument that allows specifying the base commit could be added.