Create a single config option for `vulnerabilityAlerts`

[jamietanna]

And migrate OSV vulnerability alerts under this. For instance:

{
  "vulnerabilityAlerts": {
    "enabled": true,
    "source": "osv"
  }
}