Allow group maintainers to change `pipeline_variables_default_role`

Problem

With https://gitlab.com/gitlab-org/gitlab/-/issues/499489+ adding the namespace setting pipeline_variables_default_role defaulted to no_one_allowed for new namespaces, group maintainers don't have the ability to change that.

Proposal

Add GraphQL mutation + UI in group settings.