Add ability to set default for deny non-fast-forwards and deny branch deletions for an organization (BB-7958)

There is currenlty no way to set a global default of settings for deny non-fast-forwards and deny branch deletions for an organization so that any repo's created in an organization inherit this functionality.