Only show the red bell for security issues if an action can be done

Currently, the red bell is shown whenever a CVE that is not safe is found.
We should change that so that the red bell is only shown if the admin can do something about it (i.e., upgrade).

See https://forum.xwiki.org/t/security-vulnerabilities-application-improvement-to-make-it-recommended-again/14080