Documentation for adding groups to protected branches/tags is not complete

I just noticed that we haven't added the caveat to group access levels that only direct members of that group are eligible.

We need to update the documentation to state this