rpcbind: Add PKG_CPE_ID for proper CVE tracking

[ja-pa]

Maintainer: @Andy2244
Compile tested: N/A
Run tested: N/A

Description:
This PR adds PKG_CPE_ID for CVE tracking.

Signed-off-by: Jan Pavlinec [email protected]

[ja-pa]

@Andy2244 There are projects like https://github.com/kkreitmair/cve-indicator which will benefit from better CPE ID coverage.

[Andy2244]

Sure, i noticed those CVE tracking commits, yet there seems to-be no documentation at all on how this actually works and what components naming rules maintainers should be aware of.
As example PKG_CPE_ID is not listed as valid option anywhere on https://openwrt.org/docs/.

So is it the commit message, the .patch file name?
If maintainers are expected to use the system, i think there should be at least a minimal documentation on it, with examples.

[neheb]

Merging. The issue of PKG_CPE_ID is referenced.