Extend ApprovalRules::CreateService to support group target

Why are we doing this work

To support the management of MR approval rules at the group level, we need to extend the ApprovalRules::CreateService to support the group target.

Relevant links

• See #293957 for high-level design.
• Existing project-level rule API