cri_models: cache indirect group membership

Relationship with parent groups are dynamically computed and are not stored in the database. We should add signal receivers to handle membership modifications by creating or removing the relevant parent groups membership records.