Merge branch 'vulnerability-management-policy/allow-in-create' into 'master'

Allow vulnerability management policy in update policy mutation

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/166939



Merged-by: Sashi Kumar Kumaresan <skumar@gitlab.com>
Approved-by: Michał Zając <mzajac@gitlab.com>
Approved-by: Sashi Kumar Kumaresan <skumar@gitlab.com>
Co-authored-by: Lorenz van Herwaarden <lvanherwaarden@gitlab.com>

ee/app/models/security/orchestration_policy_configuration.rb

@@ -24,7 +24,7 @@ class OrchestrationPolicyConfiguration < ApplicationRecord
     # json_schemer computes an $id fallback property for schemas lacking one.
     # But this schema is kept anonymous on purpose, so the $id is stripped.
     POLICY_SCHEMA_JSON = POLICY_SCHEMA.value.except('$id')
-    AVAILABLE_POLICY_TYPES = (%i[scan_execution_policy pipeline_execution_policy] +
+    AVAILABLE_POLICY_TYPES = (%i[scan_execution_policy pipeline_execution_policy vulnerability_management_policy] +
       Security::ScanResultPolicy::SCAN_RESULT_POLICY_TYPES).freeze
     JSON_SCHEMA_VALIDATION_TIMEOUT = 5.seconds