Move security team coverage from per-project to per-branch

After #2787165: Add security advisory coverage field to projects, it would be good to move these options to be per-branch since different branches of a project can be quite different in maintainers and activity.