feat(groups): add disable nesting option for group creation

Introduce a new boolean property `disableNesting` in the group creation form and API, allowing users to prevent other groups from being added as members. This feature applies specifically to Graph-created groups such as generic, azurerole, m365, and dynamic. Update the frontend form to include a switch for this option.

Synced from CyberDrain/CIPP@1e7e059

Author: github-actions[bot]

Config/openapi.json

@@ -3186,6 +3186,10 @@
                     "type": "boolean",
                     "description": "(auto) from CippAddGroupForm.jsx"
                   },
+                  "disableNesting": {
+                    "type": "boolean",
+                    "description": "Optional. When true, prevents other groups from being added as members. Only applies to Graph-created groups (generic, azurerole, m365, dynamic)."
+                  },
                   "primDomain": {
                     "allOf": [
                       {

Modules/CIPPCore/Public/New-CIPPGroup.ps1

@@ -118,6 +118,10 @@ function New-CIPPGroup {
                 'isAssignableToRole' = ($NormalizedGroupType -eq 'AzureRole')
             }
 
+            if ($GroupObject.disableNesting -eq $true) {
+                $BodyParams | Add-Member -NotePropertyName 'disableNesting' -NotePropertyValue $true
+            }
+
             # Handle dynamic membership
             if ($GroupObject.membershipRules) {
                 $BodyParams | Add-Member -NotePropertyName 'membershipRule' -NotePropertyValue $GroupObject.membershipRules