Change the wording for out of policy security MR validation

The wording "The merge request is targeting an old stable branch" was confusing in the edge case of having a stable branch created while that release is still not ready to be published. As pointed out on Slack, technically all backport branches are old, so this MR changes the wording .

The problem of new stable branch being ahead of the policy is a separate problem to this.