A new `protected_branch_ids` has been added so we can associate
`ProtectedBranch` records to a `ApprovalProjectRule`. The IDs
get filtered and will only allow those coming from the same
project.