Add a migration to limit group visibility by organization visibility

This is a follow-up of #506825 (closed).

In Limit group visibility based on organization vi... (!176735 - merged), we started limiting the group visibility by the organization's visibility.

Here, we need to migrate the existing groups that have visibility more than the organization's visibility and make it equal to the organization's visibility.