Improved setup flow for projects/groups.

* Students will only get non-rewrite push permissions.
* Assistants will get rewrite push permissions.
* Failure during project creation removes group and repo.