magpie-security-issue-deduplicate

Merge two <tracker> tracking issues that describe the same root-cause vulnerability, preserving every reporter's credit, every mailing-list thread reference, and every independent attack-vector description. Updates the kept issue's body in place, closes the duplicate with the duplicate label, and regenerates the CVE JSON attachment so both finders land in credits[].