feat: add option to resolve groups for users in Keycloak

[dschmidt]

Proposed Changes

Optionally load groups when resolving users from keycloak.
This allows specifying condition sets based on group membership.

I can add tests if you are interested in this patch at all.

Checklist

• I have added or updated unit tests
• I have added or updated integration tests (if appropriate)
• I have added or updated documentation

Testing Instructions

With the development setup you have a sample-user who is a member of "mygroup".

platform/service/internal/subjectmappingbuiltin/subject_mapping_builtin.go

Line 103 in a3d3f2a

if err != nil {

Set a breakpoint here and see the group being added to the flattened user entity.

[jrschumacher]

Thanks for the contribution! We'll review and add some comments. It will require some tests to ensure we can merge.