Fix custom role bug with requirements

What does this MR do and why?

Fix custom role bug with requirements

The UI now prevents including abilities in custom roles when they are implicitly included (via the base access level). This fixes incorrect validation when an ability is selected without it's requirement(s) but they are implicitly satisfied.

Changelog: fixed

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

1. http://gdk.local:3000/-/graphql-explorer

   mutation createMemberRole {
     memberRoleCreate(input: {
       name:"T1"
       description:"Test 1"
       baseAccessLevel: REPORTER
       permissions: [MANAGE_MERGE_REQUEST_SETTINGS,MANAGE_PROJECT_ACCESS_TOKENS]}) {
       errors
       __typename
     }
   }