Add security setting hooks to update analyzer statuses

What does this MR do and why?

Connects the new SettingBasedUpdateService to ProjectSecuritySetting changes using general after_commit hooks and a dedicated post-bulk operation call. The service is invoked by a dedicated worker, with a scheduler worker distributing batches of project_ids to it when needed.

This change is the final part of a series of MRs (1,2) that add ProjectSecuritySetting - related fields (secret_push_protection and container_scanning_for_registry) to the new project-level analyzer statuses. These statuses will be used for the Security Inventory feature.

Blocked by

Backfill project SD and CS analyzer statuses ba... (!195569 - merged) • rossfuhrman • 18.2

Changelog: added
EE: true

Related issue:

Namespace level statuses for DB based settings (#548281 - closed) • rossfuhrman, Gal Katz • 18.2