JS: Accept some new alerts in HardcodedCredentials

I think these were just missing 'NOT OK' comments

Author: asgerf

javascript/ql/test/query-tests/Security/CWE-798/HardcodedCredentials.js

@@ -127,12 +127,12 @@
 })();
 
 (function(){
-    require('crypto').createHmac('sha256', 'hgfedcba');
-    require("crypto-js/aes").encrypt('my message', 'hgfedcba');
+    require('crypto').createHmac('sha256', 'hgfedcba'); // $ Alert
+    require("crypto-js/aes").encrypt('my message', 'hgfedcba'); // $ Alert
 })()
 
 (function(){
-    require("cookie-session")({ secret: "hgfedcba" });
+    require("cookie-session")({ secret: "hgfedcba" }); // $ Alert
 })()
 
 (function(){