Avoid possible project authorization race condtions on project create

What does this MR do and why?

Avoid possible project authorization race condtions on project create

• use upsert
• see #526038 (comment 2408145526) for context.
• see !142600 (merged) for prior art in organizations user area

Changelog: fixed

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #526038 (closed)