Move VulnerabilityEntity from controller
serializers folder to the EE API entities module
and use ProjectEntity identity (which is also an
EE API entity) to represent the `project`
attribute of a Vulnerability.