Duo Workflow: Define group policy for access check

Igor Drozdovrequested to merge
id-duo-workflow-group-policy into master

What does this MR do and why?

This change adds a new duo_workflow permission to the group policy system.

Related to MCP support for agentic chat: Model Context Protocol Support for Agentic Chat (#546188 - closed) and https://gitlab.com/gitlab-org/gitlab/-/issues/519938+.

We put the functionality behind a feature flag: [FF] `duo_workflow_mcp_support` -- Control MCP ... (#545956 - closed), but also want to have a setting to control it.

The idea is to display this setting in UI: Duo Workflow: UI for MCP support settings (!193051 - merged). We need to show it only if Duo Workflow is available for a group. As a result, we need a group policy (which this MR adds)

Edited by Sebastian Rehm

Merge request reports