Rejected devices remain listed in static groups, even after rejection

When rejecting a device that is part of a static group, the group still lists the device in the group - which results in a rejected being shown among the accepted devices + deployments created using the group device ids never complete as they wait for the device to request the update.