Source of CVEs for the security dashboard

[mleduc]

@surli

There will be just a component for fetching the data and for converting the results to a dedicated format defined by our own APIs: so if we need to switch to another source we can just implement another component.

Yes, there will be a level of encapsulation to make it easier to switch to another source.
But it’s always better to start with the right source and avoid switching to another one later