Add JH related test for vulnerability csv service

csv_builder is override and contains more columns than upstreams, spec ee/spec/services/vulnerability_exports/exporters/csv_service_spec.rb already has corresponding spec, so I think we can skip it.