New federation support

This release makes the OIDC usable. It does not necessarily completes the JWT flow.

• expiring group membership support
• user managed IdP
• user manager mapping
• user can login with Rust CLI using the OIDC
• documentation explains both admin and user how to deploy and use it