BE: Add groups to security policy scope

Description

Backend tasks for adding the option to scope by group in policies.

Additional details

As captured in this comment:

Thanks for bringing this up! I agree that groups: would be the best option. 👍 The issue( #471583 (closed)) only focuses on updating the graphql API to return only the scoped policies and it does not deal with adding group_id. I think we can take care of this as a part of #468384 (closed)

This issue should take care of adding group_id.