feat: add jQuery Validation and GSAP library entries

[tmendo]

Summary

The app reports both libraries, but the knowledge base had no entry for either:

File	OVI	Source of the definition
jquery-validation-library-with-known-vulnerabilities.md	OVI-339	engine conf/taxonomy.csv + conf/cvss.json; severity/CVSS also in backend data migration 0297
gsap-library-with-known-vulnerabilities.md	OVI-352	backend data migration 0340_add_retire_ovi_352.py

• Severity low, CVSS 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N), CWE-1395, same as the other library entries.
• Description and fix text are the standard outdated-library wording used by every other library entry (e.g. Lodash), as confirmed for jQuery Validation.
• Compliance mirrors the engine's standard lists for both OVIs (HIPAA 164.306(a), ISO 27001 A.8.9, OWASP A5/A6, PCI 6.2, PCI DSS v4.0.1 6.2.4/6.3.3), identical to Lodash's. OWASP 2025 A03 is in those lists too, but no KB entry carries an OWASP 2025 key yet, so it is left out here as well.

Swiper, Quill, MooTools, Marked, protobuf.js and Video.js (OVI-346 to 351) are tracked separately in FAW-1573; markdown-it and highlight.js in FAW-1229.

Test plan

• Header fields and body structure match lodash-library-with-known-vulnerabilities.md line for line (only the library name differs)
• gitleaks pre-commit hook passed

🤖 Generated with Claude Code