For #update, call to Group#refresh_members_authorized_projects is
missing.

For #delete, we call Group#refresh_members_authorized_project in the
same transaction as GroupGroupLink.delete, so the
AuthorizedProjectsWorker still found those link.