Merge branch 'eb-fix-environment-scopes-graphql-auth' into 'master'

Only allow group owners to query environment scopes

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/127384



Merged-by: Roy Zwambag <rzwambag@gitlab.com>
Approved-by: Michał Zając <mzajac@gitlab.com>
Approved-by: Roy Zwambag <rzwambag@gitlab.com>
Co-authored-by: Erick Bajao <fbajao@gitlab.com>