Search script pull requests should warn when withdrawing an advisory

[mbauman]

Cf. JLSEC-2025-323 in #472. I think it's good to avoid suggesting the import of an advisory with a disputed tag, but it's less obvious that a disputed tag should be withdrawn.