Use GitLab mirrored fork of vuln-list-update

Addresses gitlab-org/gitlab#372195 (closed)

This MR updates the trivy-db-data and vuln-list-update from Github to GitLab mirrored fork at:

• gitlab-org/security-products/dependencies/vuln-list-update
• gitlab-org/security-products/dependencies/trivy-db-data