Follow-up from "Resolve "Fixed vulnerabilities should not be actionable in the report""

Create constants for status props in security reports app

The following discussion from !6169 (merged) should be addressed:

• @filipa started a discussion: (+1 comment)

  should we make 'success' a constant to avoid typos?