GEANT OIDC plugin

[Cantor, Scott]

Leaving aside the actual value put into the sub claim, you won't need any dedicated service to handle the pairwise or sector-wise IDs, I added that into the code just now.

Just populate the sector ID from OIDC into AttributeResolutionContext.attributeRecipientGroupID and the computed/stored plugins will do the right thing.

This also opens up options for other resolver behavior or filtering plugins to operate based on the sector ID (I probably need to add this to the filter context too, I'll do that now).

-- Scott