Factor in severity from AffectedByPackageRelatedVulnerability in package risk computation

[keshav-space]

Current design(#1543) takes into account the severity available globally at the vulnerability level. Going forward, we also need to factor in the severity available at the package-vulnerability intersection.