Add granular RBAC SSO support

[hardillb]

fixes #7396

Description

Includes both SMAL and LDAP

Also includes a fix for the direct SSO login buttons on login page

Related Issue(s)

#7396

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
  • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production
• Link to Changelog Entry PR, or note why one is not needed.

Labels

• Includes a DB migration? -> add the area:migration label

[codecov]

Codecov Report

❌ Patch coverage is 51.11111% with 44 lines in your changes missing coverage. Please review.
✅ Project coverage is 75.31%. Comparing base (cababe3) to head (7d0b7ea).

Files with missing lines	Patch %	Lines
forge/ee/lib/sso/index.js	48.83%	44 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7733      +/-   ##
==========================================
- Coverage   75.39%   75.31%   -0.09%     
==========================================
  Files         428      428              
  Lines       22540    22616      +76     
  Branches     5945     5965      +20     
==========================================
+ Hits        16994    17033      +39     
- Misses       5546     5583      +37     

Flag	Coverage Δ
backend	75.31% <51.11%> (-0.09%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.