Remediation categories

[tschmidtb51]

• addresses parts of https://github.com/oasis-tcs/csaf/issues/563, https://github.com/oasis-tcs/csaf/issues/662
• fixes https://github.com/oasis-tcs/csaf/issues/541
• add values optional_patch and fix_planned as remediation category
• adapt prose
• add conversion rules from CVRF
• add conversion rules from CSAF 2.0
• restructure mutually exclusive categories
• clarify that reference of products can be direct or indirect
• add mandatory test for contradicting remediations
• add mandatory test for contradicting Product status remediations combinations
• add optional test for discouraged product status remediation combinations
• add invalid examples
• add valid examples
• add table for contradicting product status group remediation category combinations

[jdstefaniak]

LGTM @tschmidtb51. Thank You.

[santosomar]

A motion was moved by Thomas to include the changes suggested in this pull request, during the CSAF TC monthly meeting on 2024-10-30. The motion was seconded by Omar. The motion passed.