Dynamic Group Reference for Device Group Exclusion Criteria

Device Group exclusion criteria currently only support a static list of manually selected devices, which does not update when the referenced source group's membership changes. This requires administrators to manually re-open dependent groups and adjust the exclusion list whenever devices are added or removed from the excluded group, creating ongoing maintenance overhead and risk of drift between groups. This enhancement would allow a Device Group's exclusion criteria to reference another Device Group directly as a live object rather than a static device list. When the referenced group's membership changes, the dependent group's computed membership would update automatically on next evaluation. Customers managing groups with overlapping or conditional membership requirements would benefit from reduced manual maintenance and improved accuracy in group-based access, compliance, or reporting workflows.