Fill groups from HIFIS virtual organisations (VOs)

As we are not really allowed to use the gfz ldap to introduce the groups, it is the idea to use the virtual organisations of HIFIS.

We can basically reuse the access token that the sms frontend gets from the IDP, make the get user info request & extract the groups.

We will need to use some conventions to extract then membership vs admin from the VOs.

So when everone that uses the SMS, also send a request to the IDL, we can fill the group information in the IDL here incrementally with every new user. It is also ok regarding to data privacy as they need to agree that the VOs are queried for the SMS.