feat: sync version-driven intel coverage

08-threat-intel/source-map.yaml

@@ -2372,16 +2372,16 @@ systems:
     tier: rolling-24m
     advisory_modes: [core, plugin]
     official_sources:
-      - name: Elastic Security Announcements
+      - name: Elastic Product Security
         kind: html-links
-        url: https://discuss.elastic.co/c/announcements/security-announcements/31
+        url: https://www.elastic.co/product-security
         confidence: official
         advisory_mode: core
         keywords: [kibana, elastic, security]
-        max_items: 60
-        status: retired
-        retired_reason: Elastic Security Announcements RSS is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.
-        replacement_sources: [Elastic Security Announcements RSS]
+        max_items: 20
+        parser_hints:
+          include_url_patterns:
+            - "https://discuss\\.elastic\\.co/c/announcements/security-announcements"
       - name: Elastic Security Announcements RSS
         kind: rss-feed
         url: https://discuss.elastic.co/c/announcements/security-announcements/31.rss
@@ -2389,15 +2389,18 @@ systems:
         advisory_mode: core
         keywords: [kibana, elastic, security]
         max_items: 60
+        status: retired
+        retired_reason: Elastic Discuss RSS is frequently rate-limited by cloud_10_secs_limit during monitor/source-health bursts; use Elastic Product Security plus NVD Kibana for stable active coverage.
+        replacement_sources: [Elastic Product Security, NVD Kibana]
+        health_policy:
+          retries: 4
+          backoff_seconds: 3.5
       - name: NVD Kibana
         kind: nvd-search
         keyword: Kibana
         confidence: official
         advisory_mode: core
         results_per_page: 40
-        status: retired
-        retired_reason: Elastic Security Announcements RSS provides an official machine-readable feed, replacing NVD public search.
-        replacement_sources: [Elastic Security Announcements, Elastic Security Announcements RSS]
     ecosystem_sources: []
     research_sources: []
     package_names: []