PVA/EVSRESTAPI-581: add grouping to ncit roles

[peter-va]

EVSRESTAPI-581: add grouping for role groups to ncit concept roles

Simple roles are all tagged with group 0, complex role group pairs 1,2,3,etc

[bcarlsenca]

OK approving - I did bring in the develop changes. I am curious about the changes on the github workflows - if that was for a particular reason. Please go ahead and merge.

[peter-va]

the github workflow changes were twofold:

1. the permission stuff just addresses a security advisory that github flagged. It was only medium, but it was a 1 line fix so i figured it was worth doing.
2. the second one was just a small refactor of the vulnerability reporting so that we don't have to click two separate tabs to see the number of vulnerabilities and the list itself.
   Pretty much just little stuff around the edges.