Send security training enabled status through backend instead of GraphQL

The GraphQL endpoint for fetching the subscription license data will only work for admin users. Standard users will get an error message:

Admin users, license is returned	Standard users, error is returned

For a project, on the Security & Compliance -> Configuration page, if the license plan is ultimate, we should show a Vulnerability Management tab, and hide it if it's any other plan:

However, because normal users can't retrieve the license info from the GraphQL endpoint, they were not seeing the tab even though they should be able to. This MR fixes it by having the backend pass us a boolean that we can use instead.

Related to #358182 (closed) and #358183 (closed)