misc: do not let internal roles grant access to backoffice (#38409)

wcs/ctl/hobo_notify.py

@@ -136,6 +136,7 @@ class CmdHoboNotify(Command):
                 role.emails_to_members = emails_to_members
                 if role.slug.startswith('_'):
                     role.internal = True
+                    role.allows_backoffice_access = False
                 role.store()
             elif action == 'deprovision':
                 # Deprovision