project: don't use deprecated assignRoleToSecurityGroup

We don't even use the new updateLocalRolesOnSecurityGroups instead, because roles are supposed to be applied by an interaction workflow.