Create a provider for R advisory data

[westonsteimel]

What would you like to be added:

Capture R advisory data at https://github.com/RConsortium/r-advisory-database/tree/main/vulns. This is in OSV format (encoded as yaml).

Why is this needed:

Improved vulnerability matching for R packages installed from CRAN and bioconductor

Additional context: