SAST VR – Backend (1) – Create new custom ability and wire to roles

What does this MR do and why?

We define the new update_sast_vr_setting custom ability and grant it to maintainer, owner, and security_manager at the project scope.

This MR closes #599602 (closed)

References

• Main issue: #599602 (closed)
• SAST Vulnerability Resolution - Backend sub-epic gitlab-org#21971
• Main epic: gitlab-org#21725

Screenshots or screen recordings

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.