feat: add 'groups' namespace for managing RBAC groups

[bevzzz]

This PR add a new groups namespace for assigning / revoking roles to user groups rather than individual users. The API is similar to that in users namespace:

client.groups.oidc.assignRoles('fifth-floor-empl', [analystRole, researcherRole]);
client.groups.oidc.getAssignedRoles('fifth-floor-empl'); // Returns {'analyst': {...}, 'researcher': {...}}
client.groups.oidc.getKnownGroupNames(); // Returns ['fifth-floor-empl'];
client.groups.oidc.revokeRoles('fifth-floor-empl', researcherRole);

Complimenting that are GroupPermissions which a role can now have:

client.roles.create(
  'group-admin',
  wv.permissions.groups.oidc('general', read: true, assignAndRevoke: true),
);

[orca-security-eu]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   0   0	View in Orca
Passed	SAST	0   0   0   0	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca

[bevzzz]

Because this is targeting stable/1.32 regenerating the schema from it is a bit of a hassle. In the end, all we want is for GroupType to not include 'db', which it already does.

I'm going to merge the PR as is.