Moves authorizations to resolvers

app/graphql/mutations/ci/base.rb

@@ -13,9 +13,6 @@ module Mutations
             null: true,
             description: 'The pipeline after mutation'
 
-      authorize :update_pipeline
-      authorize :destroy_pipeline
-
       private
 
       def find_object(id:)

app/graphql/mutations/ci/pipeline_destroy.rb

@@ -5,6 +5,8 @@ module Mutations
     class PipelineDestroy < Base
       graphql_name 'PipelineDestroy'
 
+      authorize :destroy_pipeline
+
       def resolve(id:)
         pipeline = authorized_find!(id: id)
         project = pipeline.project

app/graphql/mutations/ci/pipeline_retry.rb

@@ -5,6 +5,8 @@ module Mutations
     class PipelineRetry < Base
       graphql_name 'PipelineRetry'
 
+      authorize :update_pipeline
+
       def resolve(id:)
         pipeline = authorized_find!(id: id)
         project = pipeline.project