Drop Vulnerabilities without finding_id

Why are we doing this work?

After finishing backfilling finding_id we found out that we could not populate the column for 6300 rows. We must drop those records before we can validate the finding_id foreign key constraint.

Implementation plan

• database Write a batched background migration to Vulnerablities where finding_id: nil