fix the way bulk update endpoints in finding view works in v3

[dogboat]

This PR updates the 'bulk update endpoints' functionality in the Finding view to work when V3/Locations are enabled. When using V3, the bulk edit options change to being radio buttons instead of checksbox since only one status can be set at a time in the new model.

[dogboat]

Unrelated to the actual fix at hand but I noticed the extra hd close tag here was causing the chevron to render oddly.

[dogboat]

This whole chunk was really just moved below so the bulk edit button appears closer to the endpoints lists.

[dryrunsecurity]

🟡 Please give this pull request extra attention during review.

This pull request includes a risky use of Django's safe filter in dojo/templates/dojo/snippets/endpoints.html (lines 259–261) on endpoint.auditor, which disables automatic escaping and can allow cross-site scripting if that value is not properly sanitized. Consider removing safe, ensuring the value is trusted, or explicitly sanitizing/escaping output to mitigate XSS.

🟡 Potential Cross-Site Scripting in dojo/templates/dojo/snippets/endpoints.html (drs_b9abb469)

Vulnerability	Potential Cross-Site Scripting
Description	The template uses the safe filter on endpoint.auditor, which disables Django's automatic escaping for that value and can allow untrusted input to inject HTML/JS, leading to XSS if the content is not sanitized.

django-DefectDojo/dojo/templates/dojo/snippets/endpoints.html

Lines 259 to 261 in 8034a76

	<td>{{ endpoint.auditor|safe }}</td>
	<td>{{ endpoint.audit_time|date }}</td>
	{% else %}

---

All finding details can be found in the DryRun Security Dashboard.