[RFC] Fedora Support

[hdonnay]

trafficstars

This adds (most of) an updater that speaks the bodhi API, as used by the Fedora Project.

As structured, there's some open questions:

How can we match an entire distribution "out of support"? Is there a good generic way to do this? Should we continue to populate specific vulnerabilities once a distribution is EoL?