tools/libressl: Add PKG_CPE_ID for proper CVE tracking