Display-time deduplication of security advisories.

Multiple advisory sources (EEF, GHSA, NVD, ...) can publish the same vulnerability under different identifiers and cross-reference each other via the aliases field. group_for_display/1 groups such advisories and picks a deterministic primary so callers can render one entry per vulnerability.