Also, move wait block into the correct page block.

We will reuse the the dropdown, but exclude some menu items based on
permissions.

So moving the menu to a partial, and adding checks for each menu item here.

Resolves CVE-2017-18258

CE: Fix QA protected branches tests

See merge request gitlab-org/gitlab-ce!18585

while producing products. Basically an attempt to fix:
https://gitlab.com/gitlab-org/gitlab-qa/-/jobs/65016456

Selenium::WebDriver::Error::StaleElementReferenceError:
  stale element reference: element is not attached to the page document

in:

``` ruby
product :name do
  Page::Project::Settings::Repository.act do
    expand_protected_branches(&:last_branch_name)
  end
end
```

We could revisit which we don't want to run in qa.

Add missing QA selectors as well