Remove GHSA ids from CREDITS entries for #6127, #6129

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: cowtowncoder

release-notes/CREDITS-2.x

@@ -1923,8 +1923,8 @@ Aysha Afrah Ziya (@aysha-afrah26)
 
 @waydeshi
  * Reported #6127: Add `StreamReadConstraints` number len constraint to GregorianCalendar
-   and Duration [GHSA-q4xh-88c3-wmh7]
+   and Duration
   (2.18.10)
  * Reported #6129: Limit the supported URL schemes for `java.nio.file.Path`
-   deserialization [GHSA-wjgm-6hv5-3cvf]
+   deserialization
   (2.18.10)