Previously it was possible to create or update an external
status check with a protected branch of any project, including
a private one.

Adds a validation to external status check to enforce
all external status checks to only contain protected
branches from their projects.

Changelog: security
EE: true