Remove cvs_malware_advisories feature flag

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Work on this issue
• Close this issue

The continuous vulnerability scanning (CVS) engine integrates malware advisories to generate vulnerability findings. When this flag is enabled, malware data from the advisory sync service feeds into the CVS pipeline to produce vulnerability findings that include malware risk.

• Delete the feature flag definition YAML for cvs_malware_advisories.
• Remove the Feature.enabled?/Feature.disabled? guards for cvs_malware_advisories, keeping the enabled code path as the default (unconditional) behavior.
• Update or remove specs that stub/toggle cvs_malware_advisories.
• Verify there are no remaining references to cvs_malware_advisories in the codebase.

Flag details: Introduced in 19.4, default_enabled: true (Beta), owned by group::composition analysis. Rollout: #612098. Feature: #612094 (closed).

Remove this flag only after it is confirmed stable at GA.