[PM-27291] Fix critical apps not being preserved after org change

PR #17053 broke the critical app preservation logic from PR #17008 by
removing the null check in the report state scan operator. This caused
critical app flags to be lost when currState.data was null.

Restored the original logic: only update data if currState.data is
non-null, otherwise preserve prevState.data.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

bitwarden_license/bit-common/src/dirt/reports/risk-insights/services/domain/risk-insights-orchestrator.service.ts

@@ -726,7 +726,7 @@ export class RiskInsightsOrchestratorService {
       scan((prevState: ReportState, currState: ReportState) => ({
         ...prevState,
         ...currState,
-        data: currState.data,
+        data: currState.data !== null ? currState.data : prevState.data,
       })),
       startWith({ loading: false, error: null, data: null }),
       shareReplay({ bufferSize: 1, refCount: true }),