Design: Group level merge request approval rules (all protected branches)