Use new vulnerability list on new group report

What does this MR do and why?

This MR wires up the new group report to use the new vulnerability list. Previously, only the counts were shown, and now the list is shown as well. This MR does the GraphQL request for vulnerabilities and handles the infinite scrolling logic. Note that this is a refactor of an existing feature, and is currently behind a development feature flag until all parts are complete.

How to set up and validate locally

1. Enable the :operational_vulnerabilities feature flag.

2. Go to any group's vulnerability report.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.

Related to #338790 (closed)