fix: normalize missing deletes and empty REST lists

internal/database/vulnerability.go

@@ -258,7 +258,7 @@ func (db *DB) ListVulnerabilitiesForAccess(limit, offset int, filter Vulnerabili
 	}
 	defer rows.Close()
 
-	var vulnerabilities []*Vulnerability
+	vulnerabilities := make([]*Vulnerability, 0)
 	for rows.Next() {
 		var vuln Vulnerability
 		err := rows.Scan(