feat: add environments filter on projects

[pchalamet]

Ability to restrict a project to given environments. By default, no filter.
Environment must be specified (see --environment) and environments block set.

project infra_auth {
    depends_on = [ project.infra_dns ]
    labels = [ "infra" ]
    environments = [ "dev" ]
    @terraform { }
}