Collect advisory credits in AdvisoryV2

[keshav-space]

AdvisoryV2 should have field to store advisory credits. See the credits section in the CVE schema https://cveproject.github.io/cve-schema/schema/docs/#oneOf_i0_containers_cna_credits

[ziadhany]

OSV schema also has credits field : https://ossf.github.io/osv-schema/#credits-fields

[Mahaboobunnisa123]

Hi @keshav-space, I’d like to take up #2121 if it’s still available.
OSV has a credits array with name (required), optional contact and type, and CVE’s CNA container has a richer credits structure (language/role/type, optional IDs/text). I’m thinking we add a credits JSON field on AdvisoryV2 and store a normalized list by keeping the common bits like name/contact/type, and also preserve CVE-specific fields so we don’t lose data. Then I’ll wire it into the OSV and CVE importers, add a migration, and include a couple of regression tests. If that approach sounds right, please assign it to me and I’ll send a PR. Thanks!