Collect CVE authorized Data Providers from https://github.com/CVEProject/sadp-pilot

[pombredanne]

See https://github.com/CVEProject/sadp-pilot ... these should be new advisories

[kx7m2qd]

I'd like to work on this already started digging into it.

Looking at the existing vulnrichment_importer.py pipeline as a reference (CISA's Vulnrichment importer follows basically the same shape as sadp-pilot: CVE JSON records, adp container parsing), so I'm following that pattern and pulling out the SADP-specific fields (supplier/product status, downstream inheritance) into AdvisoryDataV2.

Will open a PR once I have a working version against a few sample records. Let me know if there's a preferred scope for the first pass, or if the core advisory fields alone are enough for v1.