advisories utility enhancements

- ensure published is before modified, and published is <= now
- check that filename and ID correspond
- ensure that the `git` ecosystem repository is the same as the package dev-repo

please comment if you have further (smaller) ideas