Add Requirement policy

Before we allow users create Requirements (#207954 (closed)), we need to define policy for Requirement resource which we can use for managing access to this resource.

Policy should be similar to epics (actions "View group epic" and "Create/edit group epic") -> so user should be at least developer to create a requirement.

Related to comment &2703 (comment 294489850)