BZ# 1128282 - Remove descendant hostgroups from the foreman host form

Users should not assign hosts directly to the deployment hostgroups.
This removes those choices from the host edit form.
Also, extends the foreman API to disallow setting the hostgroup via the API
Depending on the answer to my first comment, this would need to change too.