Backend: Accept multiple group ids and project ids for replacing

We need to add a GraphQL API to support "Replace all attributes". It should accept multiple group ids and/or multiple project ids to apply the changes to, as well as multiple attributes that represent what attributes those groups/projects will have applied to them.

See the design here for more details: #547963[Security_inventory-_group-level_-_security_labels_-_bulk_actions_-_drawer.png]