[GHSA-cpmr-mw4j-99r7] Add CWE-22 for Label Studio path traversal

[yhay81]

Summary

Add CWE-22 to the existing reviewed advisory for Label Studio's Nginx alias path traversal.

Rationale

• The public maintainer advisory explicitly lists CWE-22.
• The advisory describes a pathname escaping the intended aliased directory through a missing trailing slash.
• The public fix commit adds the missing trailing slashes to the affected Nginx location and alias directives.
• CWE-22 covers path traversal outside an intended restricted directory.

The earlier advisory improvement in #2921 added the fixed version. This PR only fills the still-empty database_specific.cwe_ids field and does not change the package, version range, severity, or advisory text.

Validation

• Updated one advisory file only.
• Parsed the result with python3 -m json.tool.
• Validated the result against the current OSV JSON schema with check-jsonschema.