Add new "Job token permissions" inbound control option

Problem to solve

🔗 See #468973's Problem to solve section

Proposal

🔪 Split from Convert CI/CD settings "Job token permissions" ... (#468973 - closed)

Add an option to the radio button group:

Authorized groups and projects:

• 🔘 All groups and projects
• 🔘 This project only 👈
• 🔘 This project and any groups and projects in the allowlist

What these options do:

• All groups and projects sets inboundJobTokenScopeEnabled: false
• This project and any groups and projects in the allowlist sets inboundJobTokenScopeEnabled: true
• The new This project only option should be the equivalent of inboundJobTokenScopeEnabled: true with an empty allowlist

For transparency, the allowlist should be saved and editable in the UI even when this option is selected. This way, you can adjust access quickly and not lose your list just because you disabled some access.