importer: implement importer for vulnrich data
This imported extracts data from the vulnrichment project provided by CISA.
The NVD feed is for the time being not providing the data required to match vulnerabilities to packages, so we need an additional source.