[BUG] - Vulnerability Alerts should be off, unless configured

[bzarboni1]

We recently added has_vulnerability_alerts as a flag for repositories. The ask was to make vulnerabilty alerts off/false by default, and only true when the user configures has_vulnerability_alerts = true.

Currently, the default is true