Split environments visibility setting from operations

What does this MR do and why?

This MR contains backend changes for separating the visibility setting of Environments from the operations setting it is currently controlled by.

This change is behind the split_operations_visibility_permissions FF (introduced in !89089 (diffs)), which is disabled by default.

Related to #361586 (closed)

Screenshots or screen recordings

Setting	FF OFF	FF ON
OFF
ON

How to set up and validate locally

Enable FF:

Feature.enable(:split_operations_visibility_permissions, project)

Enable setting:

project.update(environments_access_level: 'enabled')

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.