There are two cluster hierarchies one for the deployment platform and one for controllers. The main difference is that deployment platforms do not check user permissions and only return the first match.
This is in addtion to the can checks we have in the controller, as a finder can be used elsewhere in the future.
Show both the cluster(s) of the clusterable, and the cluster(s) of ancestor groups.