Drop contract group call scope

[roman-khimov]

Is your feature request related to a problem? Please describe.

I'm always frustrated when I have to deal with contract group in NeoFS. It's an additional key that doesn't fit well into the key management scheme, it complicates contract deployments and updates. The good thing about it is that it simplifies invocations, but to me it doesn't justify the management overhead for our system.

Describe the solution you'd like

Use Rules witness where needed for executions and enumerate all correct calls there. Many invocations are just fine with CalledByEntry only, some require more complex scopes. The minimal required scope must be used for every invocation.

Describe alternatives you've considered

Wasting time and code to manage contract group, meh.

Additional context

Refs. #2405.

[roman-khimov]

container calls nns to register TLDs in _deploy.
container calls balance to transfer registration fee in Put and PutNamed.
container calls nns to register nice name in PutNamed.
container calld neofsid to add a key in Put and PutNamed.
container calls nns to drop nice name in Delete.

netmap calls newEpoch of container and balance when its own NewEpoch is being processed.

nns can call onNEP11Payment if owner is a contract, but this likely doesn't matter much.

And that's it, all of the calls that really use contract group now.