Security Configuration: Move features available in Free above Ultimate-only features

Proposal

On the Security Configuration page, a user can set up various Secure+Protect features. In Ultimate, all controls are active. But in lower tiers, controls show either a disabled state ("Available with Ultimate") or an active state with the relevant call to action ("Configure with merge request").

Secret Detection, which is available in all tiers, appears after other Ultimate-only features. At typical screen sizes, this means it appears below the fold and the user has to scroll down to discover it. This is exacerbated by the presence of two other call-to-action elements on the page (at least for new projects).

To help users discover and use the features that are already available to them, we should sort available features above those that aren't available.

Possible future items

Moving available items to the top of the list seems like a minimal iteration.

Separately, we could also explore other enhancements, like grouping features together, or otherwise helping users A) know that there is a long list of security features they'll get in Ultimate, and B) quickly grok their scope (e.g. they should be able to quickly tell what applies pre-build, what is dynamically tested against a running app, what applies to containers).

It also isn't entirely clear how this list is sorted in the first place.