Fix vulnerability statistics calculation

`SystemNoteService.change_vulnerability_state` has a side effect on the
vulnerability object which is changing the `previous_changes` and
breaking the statistics calculation logic. Therefore we have to execute
the statistics logic before the `SystemNoteService`.

ee/app/services/vulnerabilities/base_service.rb

@@ -15,9 +15,9 @@ module Vulnerabilities
     def update_with_note(vulnerability, params)
       return false unless vulnerability.update(params)
 
-      SystemNoteService.change_vulnerability_state(vulnerability, @user) if vulnerability.state_previously_changed?
       Vulnerabilities::Statistics::UpdateService.update_for(vulnerability)
       Vulnerabilities::HistoricalStatistics::UpdateService.update_for(vulnerability.project)
+      SystemNoteService.change_vulnerability_state(vulnerability, @user) if vulnerability.state_previously_changed?
       true
     end