- I moved project_vulnerabilities_app to the directory where
  the group/instance vulnerability code is, so that they are all
  together
- I moved vulnerability_list to the directory that uses it the most
- update files referencing them
- move graphql queries to security_dashboard, where they are
  used