fix: auth policy check on subproject delete endpoint
The tenant admin role was wrongly authorized to delete a subproject while the correct role is the subproject admin (as per documentation)
Starting on April 8th, The Open Group will require Two Factor Authentication for all GitLab users. For instructions on setting up 2FA, see the Knowledge Article or GitLab Documentation. Note in particular that any HTTPS clones will require the use of a Personal Access Token (rather than a user’s password) once 2FA is enabled.
The tenant admin role was wrongly authorized to delete a subproject while the correct role is the subproject admin (as per documentation)