[ci] make the publisher problem easier to debug by testing it alone
[backend] post relsyncs to correct binary backend server
[backend] also use correct reposerver in getrelsync (basically unused)
[api] support new CVE-YYYY-NNNN* syntax as specified by mitre.org

http://cve.mitre.org/cve/identifiers/syntaxchange.html
[api] remove test that no longer makes sense

as the lastnotifications fetching is blocking now, we can't do it in
test cases unless we generate events in the backend
[api] continue refactoring BsRequestAction model