- Adds prevention policies to group/namespace when root namespace
  is over storage limit and instance is dot com.
- Add dot com check and FF check to Namespace#over_storage_limit method.
- Adjust GroupMembersFinder method to avoid unnecessary ability check
  when possible.  Fixes a broken test in gitlab/com_spec.rb.