Manage Team in Environment permissions to invite/update/remove other teams

[SofiaSazonova]

#1212

There are three steps to properly solve this issue:

• Quick bugfix. Right now the user can remove group, if they can invite team. Quick solution: couple remove permission with update permission, rather then invite permission. ( bugfix bugfix: EnvironmentGroup can remove other groups #1234 )

• Introduce ResourcePolicy with the resource_type = 'EnvironmentGroup'. In invitation form the user will have to input 'Supervisors' -- team/group, that have permissions to update and remove EnvironmentGroup.

• TO DECIDE: Implement 'permission boundaries' mechanism. Each tram can grant other team with limited permissions.

[noah-paige]

May want to deisgn with similar logic as to what we implement for Organizations w.r.t #1273