Rename package metadata advisory source xid

What does this MR do and why?

Update the name of allowed advisory sources to match what's being exported. Otherwise an error is thrown during advisory ingestion.

How to set up and validate locally

Run script specified in Steps to reproduce against this branch: #432878 (closed)

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.

Related to #432878 (closed)