Protect merge request pipelines based on project setting

To tackle this EPIC - &17186 (closed)

We need to make protected variables available in merge request pipelines if both the source and target branches of the MR are protected and the project setting to control the merge request pipeline is enabled