Restore security alert unsubscribe fallback

[jasonlong]

Summary

• restore u on a security alert as a local Done action
• apply the same fallback to security alerts in mixed bulk unsubscribe batches
• report thread unsubscribe and security-alert Done outcomes accurately
• add a regression test using a loaded Dependabot alert

Testing

• just test
• just build
• git diff --check