Add qhelp

java/ql/src/Security/CWE/CWE-200/AndroidSensitiveNotifications.java

@@ -0,0 +1,8 @@
+// BAD: `password` is exposed in a notification.
+void confirmPassword(String password) {
+    NotificationManager manager = NotificationManager.from(this);
+    manager.send(
+        new Notification.Builder(this, CHANNEL_ID)
+        .setContentText("Your password is: " + password)
+        .build());
+}