Machine readable encoding for configurations

[oliverchang]

For example, some vulnerabilities may only be relevant on certain operating systems / architectures. Are there other similar information that can be encoded in a machine readable and actionable way?

This issue tracks adding this as a potential new field to affected. e.g. something like:

{
	"affected": [ {
                 ....
		"configurations": [
                   {"os": "Windows"},
                   {"arch": "x86-64"},
                 ]
	} ]
}

This glosses over some additional detail (e.g. do we need to express specific versions of OSes?)