Add protected_environment/ and protected_environments/environment
API calls by analogy with protected branches

+specs