Fix Security features tables cross-joining `ci_builds` to find project and to map pipeline -> security scans -- application level (read) change to use `security_scans.project_id` and `security_scans.pipeline_id`

This is a continuation of #333414 (closed) and #336198 (closed). This will take care of any application level change so that we can use security_scans.project_id and security_scans.pipeline_id for reading. Before making progress on that we need to wait until our backfilling from this MR !66963 (merged) is finished first.

See !66963 (comment 640515467)