Add `admin_runners` custom role permission

What does this MR do and why?

This change introduces a new custom permission to allow users the ability to manage runners for a group or project.

#442851 (closed)

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Before	After
	After: Enable/Disable instance runners for Group

How to set up and validate locally

1. In rails console enable the experiment fully

   Feature.enable(:custom_ability_admin_runners)

2. Create a role with the Admin Runners permission enabled.
3. Assign the new role to a new user
4. Login with the new user
5. Visit any project page and ensure that the Settings menu item appears in the navigation.
6. Click on the Settings menu and ensure that the CI/CD menu item appears.
7. Click on the CI/CD menu.
8. Ensure that the Runners section appears.
9. Click on Expand
10. Ensure that the list of runners are displayed.

app/controllers/groups/settings/ci_cd_controller.rb

@@ -6,7 +6,7 @@ class CiCdController < Groups::ApplicationController
       layout 'group_settings'
       skip_cross_project_access_check :show
       before_action :authorize_admin_group!, except: :show
-      before_action :authorize_admin_cicd_variables!, only: :show
+      before_action :authorize_admin_cicd_settings!, only: :show
       before_action :authorize_update_max_artifacts_size!, only: [:update]
       before_action :define_variables, only: [:show]
       before_action :push_licensed_features, only: [:show]
@@ -47,6 +47,16 @@ def update_auto_devops
 
       private
 
+      def authorize_admin_cicd_settings!
+        return if can_any?(current_user, [
+          :admin_cicd_variables,
+          :admin_group,
+          :admin_runner
+        ], group)
+
+        access_denied!
+      end
+
       def define_variables
         define_ci_variables
       end