Add securityMetrics field to OrganizationType behind feature flag

Subashis Chakrabortyrequested to merge
605373-add-api into master

What does this MR do and why?

Add securityMetrics field to OrganizationType behind feature flag

Exposes Organization.securityMetrics (experiment, 19.3) gated by the organization_security_dashboard feature flag. Grants read_security_resource to organization owners/admins under the security_dashboard license and includes the AdvancedVulnerabilityManagementPolicy concern so the metrics sub fields can resolve once organization finder support lands.

Metrics resolution for organizations (the Elasticsearch finder/aggregation support) is a separate follow-up; this change only exposes and gates the field.

Related to #605373

Edited by Subashis Chakraborty

Merge request reports