gitlab group permissions update

[Adam Jackson]

gitlab groups are recursive, which means if you are a member of the
'xorg' group, your permission level for every project in that group is
at least as high as your permission at the top level. Most of the
existing accounts were set as Maintainer, at which level you can do
things like read and set the secret tokens used for web API
integrations, which is maybe a little too permissive in general.

I've bumped most people down to Developer, which is still enough to do
things like close issues and merge MRs. The difference is essentially
that Maintainers can modify the gitlab environment of a project, in
addition to just the project's content like a Developer. If you need
higher access for your subprojects, give a shout.

- ajax