Anthropic OSS Scanner turns raw AI vulnerability reports into a maintainer-controlled queue. Here is the verification contract it needs.