Approval notification for license compliance violations

Why are we doing this work

In Spike: Investigate and prepare PoC for Approval... (#411656 - closed), we added a bot comment for scan finding policy violations. This doesn't cover license compliance violations.

We should explore how to surface license policy violations.

Relevant links

• Bot comment nudge when merge requests require a... (&10617)
• #411656 (comment 1426680700)

Validation steps

1. Create a project, enable the feature flag security_policy_approval_notification for it
2. Add .gitlab-ci.yml

include:
  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
  - template: Jobs/Secret-Detection.gitlab-ci.yml
test-job:
  script:
  - echo "Test Job..."

2. Create a policy enforcing a license and a secret detection
3. Add MR with non-compliant license
4. Verify a comment is created
5. Remove the license again, verify the comment gets updated to "resolved"
6. Create a violation for both licenses and secrets
7. Verify that only one comment gets created
8. Resolve the validations one by one
9. Verify the comments gets updated to "resolved" after no more violations are present