Add permission ability for the Group and Security Control (Instance).
This check will allow the frontend to display the VR filter only for
allowed groups and instance level.

Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/496332

Changelog: added
EE: true

Changelog: added
EE: true

- create new group/security/vulnerabilities#index route
- create new controller to serve up vulnerabilities page
- create create page for when this feature is unavailable
- create new nav link
- remove now redundant charts on vulnerabilities page
- update tests

The plan for RSpec 4.0 is to disable monkey patching:
https://rspec.info/blog/2013/07/the-plan-for-rspec-3/#zero-monkey-patching-mode

This commit stops using RSpec monkey patching:
https://relishapp.com/rspec/rspec-core/docs/configuration/zero-monkey-patching-mode

347 files inspected, 176 offenses detected, 176 offenses corrected

Adds an EE override of groups#show action that
renders groups/security/dashboard#show view and
substitutes the controller_path, controller_name
and action_name to pretend that we're still
rendering groups/show for JS bundles and sidebar
navlinks to display and load correctly

Adds an EE override of groups#show action that
renders groups/security/dashboard#show view and
substitutes the controller_path, controller_name
and action_name to pretend that we're still
rendering groups/show for JS bundles and sidebar
navlinks to display and load correctly