Extract Vulnerabilities API into a separate module
and implement GET projects/:id/vulnerabilities API
operation. Respect :first_class_vulnerabilities
feature flag.