Add a field for the distribution

What does this MR do?

As part of the security release blog post we detail each vulnerability with the distributions (CE/EE) that are affected. Instead of going back to each MR and look at the code to figure out if the specific feature being patched is EE only or not it would probably be more simple if it was done by the person who changed the code.