CORE-3992: minor changes to the make-app-public service:

- the service now throws an exception with a reasonably useful error message when a suggested app group doesn't exist
- the service now verifies that the app isn't public already before proceeding