Introducing a compound unique index on `vulnerability_occurrence_id`,
`flag_type`, and `origin` columns will help us utilizing PostgreSQL's
upsert functionality and will prevent inserting the same flag twice.

Changelog: added
EE: true