Kevin Guerroudj

CNA scope conflict improvement

1

We recently had a misunderstanding regarding the assignment of CVEs when there's a scope conflict with another CNA. (see [SECURITY-3141](https://issues.jenkins.io/browse/SECURITY-3141?focusedId=440568&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-440568))

Clean up code around optional permissions

2

Some cleanup around optional permissions: * Deprecate helper methods and have them check real state, not system property * Remove undocumented artifactList attribute `permission` since only `Run#ARTIFACTS` is supported *...