feat: OAuth Provider Group-to-Appwrite Team Mapping

🔖 Enhancement description Add configurable mapping between OAuth provider groups (Azure AD, Google Workspace, Okta, GitHub) and Appwrite Teams, evaluated automatically during OAuth login. Current behavior: Appwrite creates a session from OAuth but ignores the user's group memberships from the identity provider. Developers must separately call provider APIs (e.g., Microsoft Graph) from application code to check groups and manually manage Appwrite Team assignments. Proposed behavior: In Console (Auth → Settings → OAuth Provider), admins configure a group-to-team mapping: | Provider Group ID | Appwrite Team | Role | |---|---|---| | bb9b19e0-... | admin | owner | | a1b2c3d4-... | developer | member | | *(default)* | guest | member | During OAuth login, Appwrite reads the groups claim from the ID token (or calls the provider's group API if unavailable), then adds/updates the user's team memberships automatically. Optional toggle: "Deny login if user is not in any …