glvd: implement minimum viable triage feature

[fwilhe]

for glvd, we need a way to set a state for cves that hides them from the default view

there are many old cves that are technically vulnerable, but in practice they are either fixed or not considered as an actual vulnerability.

we need some sort of triage feature. this requires changes to the database, and it requires some sort of writable api (so far our api is read-only on purpose to avoid having to deal with authn/authz)