Vulnerability analysis compares `template_id` instead of `subject_id`

To know if a score is genuine or an impostor, the fields to compare are probe_subject_id and bio_ref_subject_id.

The vuln commands currently use probe_template_id and bio_ref_template_id.