Add specs for group containers in PushRules::CreateOrUpdateService

As a follow-up to !197149 (comment 2618867208), we should add specs to also cover containers that are groups as well. Will be great to split out some similar specs into a shared example and re-use across all container types.