bug#21289: 'guix lint' reporting of unpatched CVEs

[Ludovic Courtès]

Similar to what <https://github.com/Phreedom/nixpkgs-monitor> does,
‘guix lint’ (or ‘guix refresh’?) should have a checker to report
unpatched CVEs in a package.

Ludo’.