Resurrecting DWF

It might be possible to treat them like git commit ids, and generally refer to them by a prefix of the full hash, e.g. CVE-2021-123e45. The full hash is still the "real" id though, and if enough are generated in a year that a collision occurs, use a longer prefix from then on.