Disallow the registration of runners to all groups and projects to just admins (Self-Managed)

Description

There may be times where server admins provide shared runners and, due to security concerns, they want to limit/prevent/gate users from registering runners to a project.

Proposal

• disallow the registration of runners to all groups and projects
• still allow in the Admin area to change a shared runner to specific on a group/project.