Extend group IP restriction to Git activity

Overview

API activity was added to restrict group access by IP in #12874 (closed). We should extend this restriction to Git activity as well; all interactions with the configured group should be filtered.

Proposal

If Git activity for a project in a group (or subgroup of the configured group with the filter) does not meet the IP address filtering for the group, reject it with an error.