Change Compliance Framework association to be group-only

Updates the ComplianceManagement::Framework class
to accept only a Group rather than _any_ type
of namespace as the associated namespace.

Before this change, it was possible to assign
a compliance framework to a personal namespace
via the GraphQL API which did not function.

EE: true
Changelog: fixed