Mark SCIM Account Group Origin

Release notes

Problem to solve

We don't know if an account was created via SCIM or created by an individual user.

Proposal

Mark all SCIM created accounts with the group they were provisioned by. We can use this information later to drive behavior through the app. This data will only be forward-looking and set on users created after this goes live. We will not go back and fill in details for existing users.