fix: importer not importing upstream values from sources (#3196)

As the internal data store name for upstream from external sources is
'upstream_raw', it needs to be set properly when received from the
sources.

osv/models.py

@@ -542,7 +542,7 @@ def update_from_vulnerability(self, vulnerability):
 
     self.aliases = list(vulnerability.aliases)
     self.related = list(vulnerability.related)
-    self.upstream = list(vulnerability.upstream)
+    self.upstream_raw = list(vulnerability.upstream)
 
     self.affected_packages = []
     for affected_package in vulnerability.affected: