Include Alpine and Debian security tracker links to vulnerability `references` on OSV.dev

[hogo6002]

Is your feature request related to a problem? Please describe. For Alpine and Debian security tracker entries, we should add their links to the References section on OSV.dev.

Describe the solution you'd like Example: for vulnerability CVE-2024-32760, add "https://security-tracker.debian.org/tracker/CVE-2024-32760" and "https://security.alpinelinux.org/vuln/CVE-2024-32760" to the references section

[andrewpollock]

This may be better done by combine-to-osv when it's assembling the OSV record, that way the data is consistently available, regardless of how it's consumed.