Currently vendor summaries (advisories) are being populated into the fix.Detail sections but are not explicitly tagged with "advisory" -- this PR adds these explicit tags.

There are also a few CI related changes due to intermittent failures:

• remove the go build and module cache (the actions/setup-go action already takes care of this)
• bust the python CI cache
• use simpler poetry install setup
• fix CLI test failure (downloading a v6 DB from OSS)

Stacked PRs

• Add advisory tag constant grype#2432