Expand rules for ALAS year extraction

[wagoodman]

We lean on extracting the year from vulnerability IDs in order to apply a low-pass-like filter so that newer vulnerabilities can be excluded from consideration during analysis. This expands the rules around ALAS IDs to consider the "extras" packages, here's a snippet from vunnel logs to get the idea of what kind of IDs you can see now:

[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASREDIS6-2024-009.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-001.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-002.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-003.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-004.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-005.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-006.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY2.6-2023-007.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-001.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-002.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-003.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-004.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-005.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-006.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASRUBY3.0-2023-007.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASSELINUX-NG-2023-001.html
[DEBUG] http GET https://alas.aws.amazon.com/AL2/ALASSQUID4-2023-001.html