A pre-req to #14202 & #14203. A new feature, Organization Sync, should be created.

This should map OIDC claims to organization members. It is hierarchically above group & role sync, and is configured at the side wide level.

MVP should be a simple string mapping of a claim string to 0..N organizations.

No auto-create orgs, or any filtering should be created at this stage.