Pin nvd-clojure to 3.6.0

This prevents us from having to switch to 4.0.0, which requires an API
key. 3.6.0 should still work for us for the foreseeable future since our
API rate isn't high enough to be throttled w/o an API key.

Author: tobias

bin/nvd-check

@@ -7,7 +7,7 @@ set -euo pipefail
 
 ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/../" && pwd)
 
-clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd
+clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "3.6.0"}' :as nvd
 
 cd "$ROOT"
 clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check \