Fix ci_owned_runners returning other groups

What does this MR do and why?

Exclude ancestors of authorized projects when computing owned runners from custom roles

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.