[FE] Update policy scope selection to include any project

Why are we doing this work

• Currently, the policy editor only shows the projects scoped under the CSP group
• Users should should be able to exclude any instance projects for a CSP group, as it's applied globally on the instance.

Relevant links

#541516 (comment 2583142138)

Non-functional requirements

• Documentation:
• Feature flag:
• Performance:
• Testing:

Implementation plan

• frontend add new scoping options for when a group is a CSP
• frontend Allow for the option All projects in instance and be able to exclude any project in the instance
• frontend Allow for selection of Specific projects from the entire instance
• frontend Allow for the option All projects in groups and allow for the selection of any group in the instance

Verification steps