Switch from read_project_security_dashboard to read_vulnerability
Since it's a main policy. read_project_security_dashboard should
be used only for dashboard policy