Add specific checks to culprits.sh

[tokee]

Some things like group.ngroups=true are dangerous by themselves in a distributed environment and might call for a warning if they are ever seen.

Other things such as regexp-matches or prefix-queries might be waned against only if the query is slow, where "slow" might be derived by calculating percentiles from the QTimes and setting the limit at 90%.

facet.method=enum might be a problem if there are "a lot" of unique facets. That might be impossible to derive from the log.