update tinfoilhat data model
On the input side, TinfoilHat data model has been changed:
- to better handle CVE metadata
- to store upstream provenance information for file:// SRC_URIs pointing to local dirs that are not part of any layer but are cloned from remote git repos
The tinfoilhat data model in Aliens4Friends needs to be updated accordingly
fix #101
Edited by Alberto Pianon