generate advisories deterministically

[raboof]

currently CVE json (static/projects/*/CVE-*.cve.json) is not generated deterministically: the key ordering may be unpredictable. This makes regenerating the site and only spotting the actual differences harder

[basantjamwal]

Found the cause: in scripts/project-page.py, .cve.json files are written via:

json.dump(cve_doc, cveFile, ensure_ascii=True, indent=2)

No sort_keys, so key order depends on the source data and isn't stable across runs. Fix:

json.dump(cve_doc, cveFile, ensure_ascii=True, indent=2, sort_keys=True)

JSON key order isn't semantically meaningful, so sorting costs nothing and guarantees identical input always produces identical output — keeping regeneration diffs clean.

I'd like to work on this issue — could you assign it to me?