Add more flexibility to user roles

Story

As a namespace owner, I would like to add users to additional role groups, So that I can fine tune what my team can access within GDG

Solution

• Have WTD only create owners group and memberships
• Move all other roles to namespace-config, both creation and membership

Acceptance Criteria

• A config owner can assign a user to any gitlab default role