make it possible to install grype from a local path

[willmurphyscode]

What would you like to be added:

Right now, you can installed tools from a release or a pushed commit somewhere on GH. We should enable yardstick to "install" a tool by building it from a path.

Why is this needed:

Running make quality in grype has 2 unexpected behaviors right now:

1. If your local commit isn't pushed to a remote, it will fail
2. If you have uncommitted local changes, the tests will succeed, but will use grype built without those changes (because yardstick downloaded the last commit from GitHub.)

Number 2 could be especially frustrating to debug, and might surprise contributors.