Accounting: Do not allow grouping if mirror account does not match

The same grouping reference property is also used for mirror section, so if one side is doing grouping, the group must also be valid for the other side.
fixup! Refactor code to not search for Moviments, all projects validated are enough

We should also support the case where user cannot access project module