When checking if a job can be :update_build by a user, this user is then
passed all the way to ProtectedEnvironment::DeployAccessLevel. As this
user can be nil, we return false if so.

Also fixes environment json schema so that it works correctly with
oneOf.