Investigate moving to maintained CSAF library

At the moment we are maintaining a fork of the CSAF library at https://github.com/scm-rs/csaf-rs (due to inactivity of the original crate).

There's a new officially maintained CSAF https://github.com/csaf-rs/csaf library. We should explore if we could migrate to it.