Update ScanResultsPolicy Vulnerabilities Count Service to account for ref contexts

@alan identified that the the ScanResultsPolicy::VulnerabilitiesCountService will need to be updated to appropriately reflect the reality of tracking vulns across multiple branches, lest the introduction of the feature break a bunch of compliance controls relating to vulnerability count increases for branches.