Improve method naming to more accurately reflect what objects are being
created. `create_vulnerability` is misleading since we are dealing with
`findings` here instead.

Also renames the instantiations within the specs in a similar manner