Decouple vulnerability check from vulnerability dashboard reporting

[RobPasMue]

Right now both actions are dependent on both bandit and safety results. Only the first one should be based on safety/bandit reports whereas the second one should be based on GitHub safety advisories metadata