BZ# 1128282 - Remove descendant hostgroups from the foreman host form

Users should not assign hosts directly to the deployment hostgroups.
This removes those choices from the host edit form.
Also, extends the foreman API to disallow setting the hostgroup via the API
I would prevent that, yes. We certainly can change the logic to check that it is a deployment hostgroup.