[FE] Add policy scope to exclude any group from the instance

Why are we doing this work

• users want to exclude any group from the instance

Relevant links

• #551476 (comment 2591424263)

Non-functional requirements

• Documentation:
• Feature flag:
• Performance:
• Testing:

Implementation plan

• frontend allow for the selection of any group in the instance to exclude using policy_scope: { groups: { exclude: [...] } }

Verification steps