securityeval: Rewrite the security evaluation around proxy models

This algoritm is superior because:

 * It never copy its data, use the originals by proxy
 * Is notified on changes, doesn't need to be reloaded manually
 * It is easier to extend, as only sources need to change

Refs #69834