Define board policy
Follow-up from https://dev.gitlab.org/gitlab/gitlab-ee/merge_requests/721#note_139430:
related, we're starting to litter the codebase with
board.group_board?
checks - should we consider adding aBoardPolicy
that automatically knows what permissions to check to abstract this away?
Thanks @mdelaossa for pointing this out.