Draft: Sets Ddr::PolicyGroupService as Ddr::Auth.grouper_gateway
Currently this is only used to get the list of repository groups for role assignment. In future, however, when legacy groups have been migrated to policy groups, it can and should replace using LDAP.
Other changes:
- New service: Ddr::RoleService
- New task: ddr:roles:reassign - to reassign roles from one agent to another
- ddr:roles tasks call methods in Ddr::RoleService.
- ddr:roles spec tests removed in deference to spec tests of the services called