Group roles should list the providers of the permissions they use as dependencies

This is to ensure the expected behavior when exporting roles.

While we're at it, make sure we remove the ->trustData() call in $group_role->changePermissions($permissions)->trustData()->save(); in GroupPermissionsForm.