Add `group_inheritance_type` to Protected Environment rules

What does this MR do and why?

Adds the option group_inheritance_type to Protected Environment deploy access rules and approval rules to control group-related access checks

This MR is for adding the DB field and access control changes, the API and UI changes will come in a later MR

Screenshots or screen recordings

These are strongly recommended to assist reviewers and reduce the time to merge your change.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.

Related to #353309 (closed)