Automatically close GHSAs that have their CVE published

Once a CVE ID is published with a `patch` URL reference attached the GHSA can be closed as the coordinator's job is complete. This will save us needing to manually track down GHSAs once a public pull request is created.