feat: add Authentik

[MJZLOTR]

No description provided.

[akyriako]

conversion rules in 3_authentik-as-identity-provider-iam.md are assuming github_groups. shouldn't be two different cases, one for federation and one for using plain authentik users?

[akyriako]

you need to describe in 3_authentik-as-identity-provider-iam.md how/where is he going to get thejwks_uri value in authentik

[akyriako]

adjust conversion rules for authentik users to inherit groups , aka "groups": "{1]"

[MJZLOTR]

Add conversion rules to booth documents

[MJZLOTR]

add screen shot of url page and box out urls

[akyriako]

identity-federation-github: TBD

• Configuring Authentik: Link to user with identical email address or with identical user name?
  write as note to their options based on their requirements
• Step 2: Modifying Enrollment flow: I cannot find Stage default-user-settings-write
  firstly state this is only needed if you want to add group/ to select with user type
• Step 2: Modifying Enrollment flow: Is that necessary? The external user was created anyway! (related with previous)
• Checking GitHub Organization Membership: That should not be optional, it poses a big security threat unless they want to offer a B2C Auth for a SaaS scenario of their own, but in our OTC-Federation case should be strictly prohibited.
  add causion/risk that without this policy tennant is open to the public - remove optional flag
  tip create oauth github app either in organization or give this oauth app access in the organization oauth section