Block releases if there are pending security advisories

[robert3005]

We check for security advisories but we never do anything with them apart from failing next ci. We should enforce that releases cannot be created if there are unaddressed advisories