fix: skip unresolvable cpematch SWIDs

[himynamesdave]

Summary
This change prevents cpematch runs from failing the entire Celery task when one match criterion references a CPE Name ID that NVD cannot resolve through the local dictionary or API refresh path.

What changed

• catch ValueError per matchCriteriaId inside CpeMatchUpdateManager.relate_single
• log the skipped matchCriteriaId and indicator name
• continue processing the remaining matches for the same indicator
• add a regression test covering one broken match and one good match

Why
Today one unresolvable SWID or cpeNameId can abort the whole cpematch task. This narrows the failure boundary to the single broken criterion while preserving the rest of the batch.

Testing
I could not run the full unit suite in this workspace because the local environment is missing the stix2arango dependency required by the test harness.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!