five-c: Create notification and alerting engine

[pombredanne]

Create notification engine.
Deploy for test usage

[tdruez]

Events that could trigger notification:

• new vulnerability detected on a product package (at or above product risk threshold)
• license policy violation detected (new package with error/warning compliance alert) from license changes
• license coverage gap (new package with no license)