chore: stagger cron timings for vulnfeeds (#4930)

This is our current cron job dependency graph:
<img width="821" height="523" alt="image"
src="https://github.com/user-attachments/assets/d9c5f416-e9d1-4647-a064-42f89d2cce41"
/>
As such, the following changes are being made:
<b style="font-weight:normal;"><div dir="ltr" style="margin-left:0pt;"
align="left">
Cron Job | Approx duration|New Schedule | Logic / Dependency
-- | -- | -- | --
debian-copyright-mirror | 5min|0 5 * * * | Move to 5:00 AM to give it a
head start.
cpe-repo-gen | 30min|15 5 * * * | Starts after the mirror finishes (5:15
AM).
nvd-mirror | 2min|5 */2 * * * | Offset by 5 mins (5:05, 7:05, etc.) to
avoid the "top of hour" rush.
nvd-cve-osv |6-7hrs |0 6,14 * * * | Starts at 6:00 AM once dependencies
are done. Shift the second run to 2:00 PM to avoid overlapping with the
first.
cve5-to-osv |15min |30 5,13 * * * | Offset slightly from nvd-cve-osv to
stagger CPU load, but early as cve5 has no dependant crons
combine-to-osv | 6min|0 13,21 * * * | Run this ~7 hours after the
nvd-cve-osv jobs start.
alpine-cve-convert | 1min|17 * * * * | Use a "random" minute like 17 to
stay clear of other system tasks.
debian-cve-convert |1.5min |47 * * * * | Offset from the Alpine job to
keep the hourly load flat.

</div></b>

Author: jess-lowe

deployment/clouddeploy/gke-workers/base/alpine-cve-convert.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     cronLastSuccessfulTimeMins: "180"
 spec:
-  schedule: "0 * * * *"
+  schedule: "17 * * * *"
   concurrencyPolicy: Forbid
   jobTemplate:
     spec:

deployment/clouddeploy/gke-workers/base/combine-to-osv.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     cronLastSuccessfulTimeMins: "90"
 spec:
-  schedule: "30 * * * *"
+  schedule: "30 13,21 * * *"
   concurrencyPolicy: Forbid
   failedJobsHistoryLimit: 3
   jobTemplate:

deployment/clouddeploy/gke-workers/base/cpe-repo-gen.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     cronLastSuccessfulTimeMins: "2880"
 spec:
-  schedule: "0 6 * * *"
+  schedule: "15 5 * * *"
   concurrencyPolicy: Forbid
   jobTemplate:
     spec:

deployment/clouddeploy/gke-workers/base/cve5-to-osv.yaml

@@ -6,7 +6,7 @@ metadata:
     cronLastSuccessfulTimeMins: "2160"
 spec:
   timeZone: Australia/Sydney
-  schedule: "0 6,13 * * *"
+  schedule: "30 5,1 * * *"
   concurrencyPolicy: Forbid
   jobTemplate:
     spec:

deployment/clouddeploy/gke-workers/base/debian-copyright-mirror.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     cronLastSuccessfulTimeMins: "2880"
 spec:
-  schedule: "0 6 * * *"
+  schedule: "0 5 * * *"
   concurrencyPolicy: Forbid
   jobTemplate:
     spec:

deployment/clouddeploy/gke-workers/base/debian-cve-convert.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     cronLastSuccessfulTimeMins: "120"
 spec:
-  schedule: "0 * * * *"
+  schedule: "47 * * * *"
   concurrencyPolicy: Forbid
   jobTemplate:
     spec:

deployment/clouddeploy/gke-workers/base/nvd-cve-osv.yaml

@@ -6,7 +6,7 @@ metadata:
     cronLastSuccessfulTimeMins: "2160"
 spec:
   timeZone: Australia/Sydney
-  schedule: "0 6,13 * * *"
+  schedule: "0 6,14 * * *"
   concurrencyPolicy: Forbid
   jobTemplate:
     spec:

deployment/clouddeploy/gke-workers/base/nvd-mirror.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     cronLastSuccessfulTimeMins: "240"
 spec:
-  schedule: "0 */2 * * *"
+  schedule: "5 */2 * * *"
   concurrencyPolicy: Forbid
   failedJobsHistoryLimit: 3
   jobTemplate: