feat: sync version-driven intel coverage

08-threat-intel/generated/retired-sources.json

@@ -388,27 +388,15 @@
   {
     "system_id": "kibana",
     "display_name": "Kibana",
-    "source_name": "Elastic Security Announcements",
+    "source_name": "Elastic Security Announcements RSS",
     "bucket": "official_sources",
-    "kind": "html-links",
-    "retired_reason": "Elastic Security Announcements RSS is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.",
+    "kind": "rss-feed",
+    "retired_reason": "Elastic Discuss RSS is frequently rate-limited by cloud_10_secs_limit during monitor/source-health bursts; use Elastic Product Security plus NVD Kibana for stable active coverage.",
     "replacement_sources": [
-      "Elastic Security Announcements RSS"
+      "Elastic Product Security",
+      "NVD Kibana"
     ],
-    "url": "https://discuss.elastic.co/c/announcements/security-announcements/31"
-  },
-  {
-    "system_id": "kibana",
-    "display_name": "Kibana",
-    "source_name": "NVD Kibana",
-    "bucket": "official_sources",
-    "kind": "nvd-search",
-    "retired_reason": "Elastic Security Announcements RSS provides an official machine-readable feed, replacing NVD public search.",
-    "replacement_sources": [
-      "Elastic Security Announcements",
-      "Elastic Security Announcements RSS"
-    ],
-    "url": ""
+    "url": "https://discuss.elastic.co/c/announcements/security-announcements/31.rss"
   },
   {
     "system_id": "koa",