Instead of having the foreign key `repository_id` in the `projects`
table, have a FK in the `project_repositories` table. This will:

- Reduce the size of `projects` table, which is huge already.
- Make the foreign key constraint `on_delete: :cascade` useful,
  because the `project_repositories` row will be deleted when
  `projects` row is deleted.
- Since the `project_repositories` row can only be created **after**
  the `projects` row (because hashed storage needs a `projects.id`),
  it does not require updating the `projects` row after creating the
  `project_repositories`.
- Make it easier in the future to have a N-to-M relation.

When a new project is created, or migrated to hashed storage,
create/update the project repository row.

Move EE only differences for finders

Closes #8599

See merge request gitlab-org/gitlab-ee!8629

EE port of " Add a rebase API endpoint for merge requests"

See merge request gitlab-org/gitlab-ee!8623

[master] EE Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request"

See merge request gitlab/gitlab-ee!726

[master] Operations settings page visible to reporter users

See merge request gitlab/gitlab-ee!724

[master] Fixed XSS in merge request approvers

Closes #353

See merge request gitlab/gitlab-ee!662

[master] Stored XSS in Operation Page

See merge request gitlab/gitlab-ee!722

[master] Authorize user when listing board resources

Closes gitlabhq#2738

See merge request gitlab/gitlab-ee!721

[master] Resolve: Guest can set weight of a new issue

See merge request gitlab/gitlab-ee!720

[master] Fix IDOR at /drafts/publish/

Closes #356

See merge request gitlab/gitlab-ee!710

[master ee] Fixed ability to comment on and edit/delete comments on locked or confidential issues

See merge request gitlab/gitlab-ee!739

[master] Operations settings page visible to reporter users

See merge request gitlab/gitlab-ee!724

CE upstream - 2018-11-28 18:21 UTC

See merge request gitlab-org/gitlab-ee!8628

[master] EE Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request"

See merge request gitlab/gitlab-ee!726

[master] Fixed XSS in merge request approvers

Closes #353

See merge request gitlab/gitlab-ee!662

[master] Stored XSS in Operation Page

See merge request gitlab/gitlab-ee!722

[master] Authorize user when listing board resources

Closes gitlabhq#2738

See merge request gitlab/gitlab-ee!721

[master] Resolve: Guest can set weight of a new issue

See merge request gitlab/gitlab-ee!720

[master] Fix IDOR at /drafts/publish/

Closes #356

See merge request gitlab/gitlab-ee!710

Force better alignment in tables

See merge request gitlab-org/gitlab-ee!8615

[master ee] Fixed ability to comment on and edit/delete comments on locked or confidential issues

See merge request gitlab/gitlab-ee!739

# Conflicts:
#	db/schema.rb

[ci skip]

CE upstream - 2018-11-28 12:21 UTC

Closes gitlab-runner#3320

See merge request gitlab-org/gitlab-ee!8621

Show user contributions in correct timezone within user profile

Closes #38495

See merge request gitlab-org/gitlab-ce!23419

Adds QA_COOKIES option to gitlab-qa

See merge request gitlab-org/gitlab-ce!23416

Signed-off-by: Rémy Coutable <remy@rymai.me>

Resolve "Instance level Maven endpoint"

Closes #7769

See merge request gitlab-org/gitlab-ee!8274

Geo: Synchronize repository and registry removal

Closes #7960

See merge request gitlab-org/gitlab-ee!8480

Return real deployment status to frontend

Closes #53578

See merge request gitlab-org/gitlab-ce!23270