fix(report): correct csv_path indentation in write_vulnerabilities (#637)