Enhancement: Silence output unless at least one CVE is present

[mcandre]

Please reduce the amount of stdout/stderr noise that safety generates. When combined with other auditing and linting tools in a CI/CD pipeline, it can be cumbersome to sort through all the logs.

We can adopt the UNIX principle here, that no output is emitted unless a CVE is actually found.