Group level approval rules should only be available to the top level group as per https://gitlab.com/gitlab-org/gitlab/-/issues/428051. Add a validation to the ApprovalGroupRule model to enforce this.