Turns on the verified MR security reports flags

What does this MR do?

Turns on the verified MR security reports flags by default;

• sast_merge_request_report_api
• container_scanning_merge_request_report_api
• dependency_scanning_merge_request_report_api

This should have no real change to the application but will allow on-prem customers to use the backend report parsing in MRs

See &1425 (closed) for more detail on the matter.

Does this MR meet the acceptance criteria?

Conformity

• [-] Changelog entry
• [-] Documentation created/updated or follow-up review issue created
• Code review guidelines
• [-] Merge request performance guidelines
• Style guides
• [-] Database guides
• [-] Separation of EE specific content