Create a provider for perl CPAN advisories

[westonsteimel]

What would you like to be added:

Create a new vunnel provider to support matching Perl CPAN modules with the advisory data from https://github.com/briandfoy/cpan-security-advisory/blob/master/cpan-security-advisory.json. This file also include all release versions for affected modules and the publish date for them so should be able to provide accurate remediation date availability for this ecosystem

Why is this needed:
Support accurate vulnerability scans for Perl CPAN modules

Additional context:

[westonsteimel]

Need a perl package cataloger implemented in syft first

[westonsteimel]

Need a perl package cataloger implemented in syft first

Actually, this isn't strictly true. It is perfectly acceptable to build a vunnel provider to start pulling in the data and implement the syft cataloger at a later stage, particularly when it is an already well-defined OSV data shape since vunnel is mostly just caching the data it is given and all of the transformation logic that needs syft package names and grype ecosystems to align happens in grype-db