Add VO to group name for hifis sync

Currently we only save the group name from hifis. So in case we have the following hierarchy:

• VO: Moses
• sub-group: Hydrex2020
• role: gfz.sms.admin

we would get a group name from hifis as {prefix}:MOSES:Hydrex2020:gfz.sms.admin. When we only extract Hydrex2020 from this, we would risk name collisions with other VOs and risk that our permissio management will be corrupted.