GitLab

- on the security policy page, non-owners cannot link
  a policy project, so the button to do so is hidden
- give non-owners a button that links them to the
  policy project, if one exists
- update tests

Changelog: added

EE: true