Remove project and group releases json endpoints

We already have proper API for releases, and API correctly handles guests permissions(not exposing tags).

But currently, frontend uses

at least for issues filters(see this issue.

Since 2 endpoints above aren't a public API, we can remove them when fronted stops requesting them.

This is marked as security because at the moment these endpoint leak information about git tags.

Edited by Nicole Williams