Add advisory for curve25519-dalek timing variability

[tarcieri]

This impacts scalar types which represent private keys and other secrets. This vulnerability could potentially result in leakage of these values by observing the variability.