Allow toggling of group inheritance when creating a protected environment

Problem to solve

When protecting an environment, the API is capable of setting different group inheritance types, allowing either only directly-invited members or all members of a group. This is not possible in the UI.

Proposal

Add a toggle for approval rules to set the group inheritance, and somehow expand the "allowed to deploy" section allow the setting of group inheritance.

Implementation guide