Resolve "更新 security review 的逻辑"

What does this MR do and why?

更新 approved_by_security_reviewer? 方法，只有 approved by valid_security_reviewer_members 才返回 true（区分了前后端 reviewer）。

Closes #138 (closed)