Remove duplicate GHSA-37q6 reference

[cookesan]

Removes the malformed duplicate blog reference from GHSA-37q6-576q-vgr7 while leaving the clean Parcel HMR reference intact.

Audit refresh, July 8, 2026:

• Confirmed the advisory still retains the clean blog URL, NVD URL, GitHub advisory URL, and upstream Parcel issue, PR, and commit references.
• Confirmed the GHSA and NVD records for CVE-2018-14731 still resolve.
• Local checks passed: one advisory JSON file changed in the PR diff, JSON parses, git diff --check passes, and the worktree is clean.