break out the SID storage to its own GAR.sid.whitelist file

[wkitty42]

currently the white listed SIDs are stored in the settings file. they need to be broken out and stored in their own sid.whitelist file and all code referencing the needs to follow suit. this also means that sid.whitelist will need to be added to the file monitoring section of GAR.

the format of this file should be a simple csv file as used elsewhere. the first column is the SID to be white listed and the second column is a comment about why this entry is made.