Add loose foreign key on project_id to vulnerability_finding_links table

What does this MR do and why?

A small MR split off !199291 (closed) to make it more reviewable

This MR adds a missing LFK declaration on vulnerability_finding_links table

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.