quinnturner/audit-ci-codemod ? reverse-engineered prompt

Build me a small command line tool that updates old audit-ci config files to the newer format.

I want to be able to run it in a project and have it rewrite the config so older fields like whitelist, path-whitelist, and advisories get turned into the newer allowlist style entries. It should keep existing comments and formatting as much as possible, and it should handle the different kinds of values shown in the example, like plain advisories, package names, module chains, and wildcard entries.

If you need to look up the current audit-ci config format online, go ahead. Please make it work as a simple codemod I can run from the terminal, and include a few tests that cover the example conversion and edge cases.