Adds Security::VulnerableProjectsController and accompanying route,
which reuses the logic backing the vulnerable projects widget on the
group security dashboard.

https://gitlab.com/gitlab-org/gitlab/issues/17969