Post verified vulnerability notices to internal RSS feed

Vulnerability webhooks often arrive unauthenticated, creating noisy or forged notices. This publishes only verified vulnerability items to your internal feed for fast triage within minutes.