Show every attached scan profile on the group scanner details page

What does this MR do and why?

Show all attached profiles in scanner details

Show every attached scan profile on the group scanner details page.
SourceCell lists each profile as a source. ScannerDetails shows the
worst status, with a count line and popover when the profiles disagree,
and Disable detaches every profile.

Rank statuses with PROFILE_STATUSES_LEAST_TO_MOST_SEVERE, because the
frontend had no order. Move the status icon maps into constants so the
popover reuses them.

Related to https://gitlab.com/gitlab-org/gitlab/-/issues/624190
Changelog: changed
EE: true

References

• related discussion: #631608 (comment 3940331781)
• sibling MR: Show every attached scan profile on the project... (!259155 - merged)
• issue: [Frontend] Support custom Secret Detection prof... (#624190 - closed)
• epic: Advanced Secret Detection Configuration Profile (gitlab-org#20198)

Screenshots or screen recordings

	Before	After
Table
Status popover	Not shown
Sources popover	Only the first profile was listed

How to set up and validate locally

0. git checkout 624190-show-all-attached-scan-profiles-in-group-scanner-details

   expand for seed script

   project = Project.find_by_full_path('<group>/<project>')
   first, second = %w[first second].map do |name|
     profile = Security::ScanProfile.create!(
       namespace: project.root_ancestor, scan_type: :sast, name: "SAST #{name}", gitlab_recommended: false
     )
     Security::ScanProfileProject.create!(project: project, scan_profile: profile)
     profile
   end
   Security::ScanProfileProjectStatus.create!(project: project, scan_profile: first, status: :success, last_scan_at: Time.current)
   Security::ScanProfileProjectStatus.create!(project: project, scan_profile: second, status: :not_configured)

1. have a GitLab Ultimate licence

2. go to the group => Secure => Security configuration => open the Static application security testing (SAST) scanner's details

3. find the seeded project's row

4. check the Source cell:

   • it reads 2 sources with Profile under it
   • hovering it lists SAST first and SAST second, one per line

5. check the Status cell:

   • it shows the worst status, Not enabled
   • 1 of 2 profiles sits under it, at the same size as the status subtext
   • hovering it lists each profile name beside its status icon and status

6. check that projects with one profile or no profile look the same as on master

7. open the seeded project's actions menu => Disable

   • the confirmation names both profiles
   • confirm, and both profiles should be detached from the project

to run tests

yarn jest ee/spec/frontend/security_configuration/components/scan_profiles/scanner_details_spec.js ee/spec/frontend/security_configuration/components/scan_profiles/source_cell_spec.js ee/spec/frontend/security_configuration/components/scan_profiles/scanner_status_icon_spec.js

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #624190 (closed)