feat: try .zip if .gz missing or mismatches expected checksum for NVD (#5673)#5679

QSchulz wants to merge 2 commits intoossf:mainossf/cve-bin-tool:mainfrom

QSchulz:dev/nvd-zipQSchulz/cve-bin-tool:dev/nvd-zipCopy head branch name to clipboard