Exempt auditor from ip restriction

What does this MR do?

Add ip restriction exemption for users with auditor roles for groups and projects.

Does this MR meet the acceptance criteria?

Conformity

• Changelog entry
• Documentation (if required)
• Code review guidelines
• Merge request performance guidelines
• Style guides
• Database guides
• Separation of EE specific content

Related to #300455 (closed)