fetch NIST’s NVD, sync into a local database and cross‐reference with Jira