Fix display logic of Securty Report MR widget

What does this MR do?

The Security Report MR widget was being displayed if only the license compliance CI job was set up for the project, even though it would not have any data to display for its report types.

This tightens up that logic, so that it is only displayed when one or more of the security reports is set up for the project.

Fixes #200017 (closed).

WIP

This is marked WIP, as it depends on !24007 (merged).

Screenshots

Before	After

Bad UX previously

empty security report widget

Does this MR meet the acceptance criteria?

Conformity

• Changelog entry
• [-] Documentation (if required)
• Code review guidelines
• [-] Merge request performance guidelines
• Style guides
• [-] Database guides
• Separation of EE specific content

Availability and Testing

• Review and add/update tests for this feature/bug. Consider all test levels. See the Test Planning Process.
• [-] Tested in all supported browsers
• [-] Informed Infrastructure department of a default or new setting change, if applicable per definition of done