Removed Unconditionally editing of cve-id collection in cve endpoints

[david-rocca]

Closes Issue #1278

Summary

• updateCve no longer is always calling updateByCveId when it should only be called when a change from Published to Rejected or from rejected to published.
• rejectExistingCve no longer makes superfluous changes to the Cve-Id collection if the CNA is replacing one REJECTED record with a different REJECTED record.
• rejectCVE no longer makes superfluous changes to the Cve-Id collection if the CNA is entering a new REJECTED CVE Record when the CVE ID happens to be in the REJECTED state already.
• submitCVE no longer makes superfluous changes to the Cve-Id collection if the Secretariat is entering a new REJECTED CVE Record when the CVE ID happens to be in the REJECTED state already.