fix export cve permission issue

[wy65701436]

The export CVE permission should be included in the project scope, as the API relies on project-level judgment.

Thank you for contributing to Harbor!

Comprehensive Summary of your change

Issue being fixed

Fixes #(issue)

Please indicate you've done the following:

• Well Written Title and Summary of the PR
• Label the PR as needed. "release-note/ignore-for-release, release-note/new-feature, release-note/update, release-note/enhancement, release-note/community, release-note/breaking-change, release-note/docs, release-note/infra, release-note/deprecation"
• Accepted the DCO. Commits without the DCO will delay acceptance.
• Made sure tests are passing and test coverage is added if needed.
• Considered the docs impact and opened a new docs issue or PR with docs changes if needed in website repository.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 46.20%. Comparing base (c8c11b4) to head (3be0660).
Report is 339 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #21325      +/-   ##
==========================================
+ Coverage   45.36%   46.20%   +0.84%     
==========================================
  Files         244      247       +3     
  Lines       13333    13863     +530     
  Branches     2719     2867     +148     
==========================================
+ Hits         6049     6406     +357     
- Misses       6983     7120     +137     
- Partials      301      337      +36     

Flag	Coverage Δ
unittests	46.20% <ø> (+0.84%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 491 files with indirect coverage changes

[chlins]

lgtm