Allow maintainers to self-serve CVEs once a report has been resolved

[JamieSlome]

Maintainers continually request CVEs only once the report has been resolved (i.e. fixed).

We could provide a self-serve mechanism which allows a maintainer to assign a CVE to the report.

Evidence:

https://www.huntr.dev/bounties/67ca22bd-19c6-466b-955a-b1ee2da0c575/

https://www.huntr.dev/bounties/3080fc96-75d7-4868-84de-9fc8c9b90290/

https://huntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95/

https://huntr.dev/bounties/2d92f644-593b-43b4-bfd1-c8042ac60609/

https://huntr.dev/bounties/f0d85efa-4e78-4b1d-848f-edea115af64b/

https://huntr.dev/bounties/ebee593d-3fd0-4985-bf5e-7e7927e08bf6/

https://huntr.dev/bounties/c93083dc-177c-4ba0-ba83-9d7fb29a5537/

https://huntr.dev/bounties/00affb69-275d-4f4c-b419-437922bc7798/

[JamieSlome]