pub const OIDC_GROUP_ROLE_SYNC_ENABLED: Config<bool>;
Whether OIDC group-to-role sync is enabled. When true, JWT group claims are used to sync role memberships on login.