[BE] Expose MR finding token status via GraphQL API

Expose MR finding token status data via GraphQL API, corresponding changes to resolver, updates to refresh finding token status API to handle both default branch vulnerabilities and MR findings.