Restrict the persmissions in a category to a group (Category Settings > Security)
Why do you need a post in WP at all? Why not just post the project details in Discourse?
Perhaps you could start this initiative just posting the project details on Discourse (i.e. the simplest approach), and then if you find you really need the project details on wordpress too, you can think about this integration project?