[ci] verify that default reviewers in channel projects are taken for release requests (FATE #317836)
[api] add group maintainer support

Group maintainers can modify the member list of a group.
They do not have to be a group member themself.

Also, using pundit for the first time in api code for permission handling.