Sync security policy for a project when compliance framework and protected branch are updated

The following discussion from !168850 (merged) should be addressed:

• @mcavoj started a discussion: (+2 comments)

  question: If we don't link the project when scope is not applicable, do we potentially miss some links? It could be that the scope doesn't change, but a compliance framework is assigned to a project and it could become applicable 🤔