Handle comma-separated filename inputs for Sonar issues JSON and Sonar hotspots JSON

The --sarif flag currently handles comma-separated lists of files as inputs. We need to do the same for --sonar-issues-json and --sonar-hotspots-json.