Update status should indicate security coverage

To support changes to the project application process, namely decoupling the ability to create full projects/releases from security coverage - we will need to provide indicators on the update status page of which installed modules receive security coverage.

The changes would need to:

1. Indicate which modules have security coverage and which do not.
2. For modules that do not have security coverage, highlight them in yellow.
3. For modules that are explicitly unsupported for known security issues or other reasons, it should indicate that

@mlhess hopes to help drive this forward.

At the DA we can appropriately update the XML update status feed to support this change.