Add support in Apache Tomcat to collect commits

[TG1999]

https://tomcat.apache.org/security-10.html

Some of these advisories also contain commit information which we can capture with our latest models.

[meedoomostafa]

Hi @TG1999, I am interested in working on this issue. I plan to implement a new importer for Apache Tomcat by scraping their security pages using BeautifulSoup to map CVEs to their fix revisions. Could you please assign this to me ?

[meedoomostafa]

Hi @TG1999,

I have taken the time to deeply analyze the existing codebase and have implemented the enhancements for the ApacheTomcatImporter.

Here is a summary of the changes:

• Enhanced Commit Collection: The importer now captures commit URLs (GitHub, SVN, GitBox) from the entire advisory text, improving coverage.
• Duplicate Prevention: Refined the parser logic to strictly target CVE headers, preventing false duplicates from descriptive text.
• Verification: Validated with existing tests and regenerated test data to reflect the newly discovered commits.

I am ready to submit a PR.