Package managers API: permissions incoherence

Situation

Follow up of !58329 (merged)

The group level maven endpoints require:

• read_group on the target group
• read_package on the project hosting the package

The group level nuget endpoints require:

• read_package on the target group
• read_package on the project hosting the package

nuget APIs are more restrictive than maven.

Solution

Use the maven permission checks as a baseline for all group level endpoints.