Bug #2231: Hostgroup deletion follows :restrict orphan policy

Hostgroup deletion is restricted to hostgroups without children

Hostgroup tests are rewritten to follow the :restrict orphan policy

Wrap AncestryException in ForemanException

Nested deletions throw flash error on UI

Add restrict control message on the API

Fix test to work with new orphan policy

Fix comment in test