Restricted visibility settings allow creating internal project in a private group

Summary

Groups that are private should only allow private projects to be created. When the default project and group visibility is set to internal, a project with a visibility of internal is able to be created leading to some issues adding a k8s cluster to a group or registring a runner to a group.

group-visibility

project-visibility

internal-project-private-group

https://gitlab.zendesk.com/agent/tickets/116531 https://gitlab.zendesk.com/agent/tickets/116532