CORE-5832 Refactored /secured/app-groups in Donkey.

Renamed to match metadactyl endpoint, /apps/categories, and also to use the 'public' query param.
Removed obsolete /public-app-groups endpoint.