Threat-feed; use new api endpoint, add search flags

[pvdz]

This updates the threat-feed:

• switches over to the new org scoped threat-feed API endpoint (no real changes in CLI for that)
• adds support for filtering results by package name or version
• fixed an issue where having an empty default filter would result in the server rejecting it