OptionalcardinalityRaw @cardinality attribute string from the XML. The IDS 1.0 spec
does not allow cardinality on <applicability> (it is meaningless
there); upstream IDS-Audit-tool flags it as an authoring mistake.
Preserved here so the auditor can do the same check.
All facets must match for entity to be applicable
Applicability definition - all facets must match (AND logic)