FR: if rpm-ostree update includes CVE fix, then notify user in output

[solidc0re]

Describe the bug

Not a bug. Feature request.

Reproduction steps

1. rpm-ostree update
2. rpm-ostree status -v

Expected behavior

I'd like to request that the CVE output from rpm-ostree status -v is included near the end of the rpm-ostree update output, perhaps above the Run "systemctl reboot" to start a reboot line.

Actual behavior

CVEs are listed in rpm-ostree status -v but not in rpm-ostree update, so a user has to run both commands to see how urgent a recent update really is for their use case.

System details

$ rpm-ostree --version
rpm-ostree:
 Version: '2024.8'
 Git: b99fe35297d049618edcef263dedcecbb5fec572
 Features:
  - rust
  - compose
  - container
  - fedora-integration

Additional information

No response