Ship an LDIF for LDAP structure with LDAP-related roles

Because our LDAP role configs have a few quite specific expectations of LDAP data structure, we should ship an example structure in LDIF format along with docs on how to install it and how the components relate to the config.