debusine-admin create_workspace improvements (#527)

• create an Owners group, similar to scope create --with-owners-group, cf. #513 (closed) / !1148 (merged), but mandatory
• make idempotent for ansible