Add public active CNA list endpoint

[Ewgna]

Closes Issue 1962

Summary

Adds a API endpoint returning the active CNA list in the CVE.org JSON format.
GET /api/registry/org/cnas

Important Changes

src/controller/registry.controller/index.js
Added the cna list route

src/controller/registry.controller/org.registry.controller.js
returns CNAlist.json

schemas/registry-org/list-active-cnas-response.json
added the endpoint response schema

test/unit-tests/org/activeCnaListTest.js
verifies the controller returns the correct list

test/integration-tests/registry-org/activeCnaListTest.js
verifies unauthenticated access
compares sha-256 hashes of the response with the JSON

Testing

ESlint passing
Send GET /api/registry/org/cnas without authentication headers.
Confirm a 200 response containing the CNA array.

Notes

• src/scripts/CNAlist.json is treated as the authoritative source