Adjust vulnerabilities ingestion pipeline to accept CVSS fields

Implementation plan

1. Add cvss to lib/gitlab/ci/reports/security/finding.rb
2. Make sure ee/app/services/security/ingestion/finding_map.rb#to_hash returns the cvss so that the attribute gets ingested
3. Adjust specs