Add exclusive cves endpoint

[samhotep]

Done

• Created a new service to serve the security/cves.json endpoint separately. The reason for this is an anticipated increase in traffic to cves once we add the option to remove the cves field from notices returned on notices.json

QA

• Test deployment at https://jenkins.canonical.com/webteam/job/ubuntu-com-security-api/