Compute plugin package overlay CVE list

Goal

Produce a unique CVE list (CSV matching RHDH CVE Management exports) for dependency/CVE fixes on a release branch since a revision, scoped to generally-available plugin workspaces.

Primary repo: rhdh-plugin-export-overlays.

Prerequisites

• Node 18+, git, gh
• For Jira enrich (default): Cursor Atlassian MCP (plugin-atlassian-atlassian) — run cursor-mcp-auth first
• Optional local --rhdh-repo for --since date fallback

Do not reimplement parsing — run the bundled script. The CLI does not call Jira; the agent enriches via MCP.

Run (extract)