test(osv): Make the test which queries by commit less flaky

Relax the assertion to only check that a single expected vulnerability
is amongst the actually returned ones. Use the (only) vulnerability
which had been returned back when OSV was introduced, in July 2022. In
these ~2.5 years the vulnerability changed only in terms of the schema
version. As the schema version changes are not very frequent, this
likely reduces flakyness.

Signed-off-by: Frank Viernau <[email protected]>