doc: nest code fence under unordered list

When it isn't nested, a new unordered list is created for the next item

PR-URL: nodejs#29915
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

Author: nschonni

doc/guides/cve_management_process.md

@@ -123,15 +123,15 @@ following steps are used to assign, announce and report a CVE.
 
     For each CVE listed, the additional data must include the following fields
     updated with appropriate data for the CVE
-```text
-     [CVEID]: CVE-XXXX-XXXX
-     [PRODUCT]: Node.js
-     [VERSION]: 8.x+, 9.x+, 10.x+
-     [PROBLEMTYPE]: Denial of Service
-     [REFERENCES]: Link to the blog for the final announce
-     [DESCRIPTION]: Description from final announce
-     [ASSIGNINGCNA]: Node.js Foundation
-```
+    ```text
+    [CVEID]: CVE-XXXX-XXXX
+    [PRODUCT]: Node.js
+    [VERSION]: 8.x+, 9.x+, 10.x+
+    [PROBLEMTYPE]: Denial of Service
+    [REFERENCES]: Link to the blog for the final announce
+    [DESCRIPTION]: Description from final announce
+    [ASSIGNINGCNA]: Node.js Foundation
+    ```
 * Move the CVE from the Pending section to the Announced section along
   with a link to the Node.js blog post announcing that releases
   are available.