Move to minimum role project create restriction

Problem

The project create restrictions are currently somewhere between being a "minimal access role" and a "specific required role".

We've also added an owners role recently.

Proposal

We should clean this up so the drop down selection equals the minimum access role required to create a project.

While we're here we can clean up the drop down UI so the roles are ordered by more restrictive to least restrictive.