Convert security-tracker repository with split CVE list files

As discussed in https://bugs.debian.org/908678 the security-tracker git repository causes issues for the salsa services (and major usability issues). This bug serves to track needed changes to be done on the security-tracker-team/security-tracker> repository.