Support Deployment Approval for Group-Level Protected Environment

Problem

Currently, Deployment Approvals is available for project-level protected environment, but it's really nice to support it for group-level protected environments, which is more enterprise-oriented feature.

Proposal

TBD