update tinfoilhat data model

On the input side, TinfoilHat data model has been changed:

• to better handle CVE metadata
• to store upstream provenance information for file:// SRC_URIs pointing to local dirs that are not part of any layer but are cloned from remote git repos

The tinfoilhat data model in Aliens4Friends needs to be updated accordingly