Disallow reports to maintenance projects

[AMDmi3]

Ideally every project which uses stable/unstable versions which cannot be distinguished algorithmically should have a person to care of updating its rule, otherwise it's too annoying for me and requires too much time. So propagate maintenance flag to package's flags field, and disallow reports for projects with packages with this flag - require pull requests instead.