CPE: stop using deprecated CPEs, split the remap YAML into sections

Description

This PR addresses an issue brought up by @p0lr in Issue #343. In that issue @p0lr points out that we're using deprecated CPE values and that the NIST database that we're already using indicates that the values are deprecated.

I've adjusted the matching logic in update_cpes.py so that these deprecated CPEs aren't added when we build our list of NIST issued CPEs.

I've also restructured cpe-remap.yaml so that we remap values are specific to a CPE type (a, o, h). This will allow us to remap certain older records that use the same .product value but for which the CPE would be different between service.product and os.product.

For example in the fingerprint below we couldn't have created a remap for ILOM under oracle because it would have then generated (or tried to generate) the same CPE for both hw.product and os.product.

<fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
    <description>Oracle iLOM</description>
    <example>Oracle(R) Integrated Lights Out Manager</example>
    <example>Integrated Lights Out Manager</example>
    <param pos="0" name="hw.device" value="Lights Out Management"/>
    <param pos="0" name="hw.vendor" value="Oracle"/>
    <param pos="0" name="hw.family" value="ILOM"/>
    <param pos="0" name="hw.product" value="ILOM"/>
    <param pos="0" name="os.device" value="Lights Out Management"/>
    <param pos="0" name="os.vendor" value="Oracle"/>
    <param pos="0" name="os.family" value="ILOM"/>
    <param pos="0" name="os.product" value="ILOM"/>
  </fingerprint>

With the new system we can remap them independently which will help us generate CPEs for existing values without having to change them.

Motivation and Context

Correctness of results.

How Has This Been Tested?

Execution of cpe-remap.yaml, rspec, etc.

Types of changes

Bug fix (non-breaking change which fixes an issue)

Checklist:

[x] I have updated the documentation accordingly (or changes are not required).
[x] I have added tests to cover my changes (or new tests are not required).
[x] All new and existing tests passed.

rapid7 / recog