ldap-sync: GrowthBook member collector and scope filter
Turns raw /members responses into the CurrentMember map diff() needs. Scope filter restricts to members of interest (managed-project role, Bitu group, or skip-listed) so out-of-scope users don't generate noisy NOOP actions.
Bug: T420691