stats: open group count does not match with visible vulnerable groups on index

[anthraxx]

stats: open group count does not match with visible vulnerable groups on index

This occurs because we keep groups with removed packages from the repo as open in the database. The reason its not shown on the index is the explicit join on the package table that reflects the repo state.

somewhat related to #64