fix(build-tools): ignore cross group deps for policy

[jason-ha]

For tsc dependency checks limit dependencies to those within a workspace. With special exception for repo release groups (mostly restored historical check).

Add a filter function when acquiring possible predecessors. (More efficient than a post check looking through groups for consistent package name prefixes.)