If contract document categories have restricted groups, require approval from an unrestricted group

[wes-otf]

As it stands, if there is a contract document category that is restricted from staff, the project lead could be blindly approving the project documents without being able to validate they are correct. It should be required that a member of the unrestricted group approved the documents first before the restricted staff can.

Ideal example:

1. Banking details are restricted from all groups besides contracting & finance
2. Applicant uploads contract, banking details, etc.
3. Finance & contracting are notified to approve contract documents visible to them
4. Once approved, the project lead is then notified to approve the rest of the contracting documents.

Requiring this approval could potentially be a checkbox in the contract document category wagtail form, so one could blindly approve if that would better fit an adopters needs?

[wes-otf]

Putting on hold to see how staff want to handle this as it gets tested