feat: add auditing for groups (#4527)

- Clean up `database.TemplateACL` implementation.

codersdk/audit.go

@@ -21,6 +21,7 @@ const (
 	ResourceTypeWorkspace       ResourceType = "workspace"
 	ResourceTypeGitSSHKey       ResourceType = "git_ssh_key"
 	ResourceTypeAPIKey          ResourceType = "api_key"
+	ResourceTypeGroup           ResourceType = "group"
 )
 
 func (r ResourceType) FriendlyString() string {
@@ -39,6 +40,8 @@ func (r ResourceType) FriendlyString() string {
 		return "git ssh key"
 	case ResourceTypeAPIKey:
 		return "api key"
+	case ResourceTypeGroup:
+		return "group"
 	default:
 		return "unknown"
 	}