Move retention period notice to vulnerability report docs

What does this MR do and why?

Describe in detail what your merge request does and why.

The documentation about the retention period for vulnerabilities has previously resided on the secure scanner integration page. This location is less visible to customers, and it also feels out of place as the retention period relates to vulnerabilities in the DB and not the security report format.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.