Fix :admin_compliance_framework to only be true if the user is an owner

The documentation states that only owners can set a projects compliance
framework. This was erroneously changed to maintainers when removing the
custom compliance frameworks feature flag

Changelog: fixed
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/66745
EE: true

ee/app/policies/ee/project_policy.rb

@@ -373,7 +373,7 @@ module EE
 
       rule { quality_management_available & can?(:reporter_access) & can?(:create_issue) }.enable :create_test_case
 
-      rule { compliance_framework_available & can?(:maintainer_access) }.enable :admin_compliance_framework
+      rule { compliance_framework_available & can?(:owner_access) }.enable :admin_compliance_framework
 
       rule { status_page_available & can?(:owner_access) }.enable :mark_issue_for_publication
       rule { status_page_available & can?(:developer_access) }.enable :publish_status_page

ee/spec/policies/project_policy_spec.rb

@@ -1476,7 +1476,7 @@ RSpec.describe ProjectPolicy do
       :reporter   | true  | nil   | false
       :developer  | false | nil   | false
       :maintainer | false | nil   | false
-      :maintainer | true  | nil   | true
+      :maintainer | true  | nil   | false
       :owner      | false | nil   | false
       :owner      | true  | nil   | true
       :admin      | false | false | false