Move enabled_reports field to Core
For Ultimate users, the security MR widget relies on an enabled_reports
field to determine whether or not to render, and fetch additional information about security scans that were run.
The existing Core version of this widget does not rely on that field, since it's not exposed by the FOSS merge request model.
This issue tracks the migration of that field to Core.
An attempt was made in !43716 (closed), but was abandoned as it got too large in scope.