"is version affected" functions: migrate to library

> If feasible, it would be good if Flora could handle unknown introduced/fixed versions in advisories and use comparison operators on the `Version` type to deduce whether some known package version is affected. > > If it would help, we can add library functions to *hsec-core* to perform these sorts of checks. It's already implemented in the `hsec-tools query` command so we only need to move some code around and expose a library function. _Originally posted by @frasertweedale in https://github.com/haskell/security-advisories/issues/247#issuecomment-2480346756_