Refactor `LDAPGroupSync` worker to clean it up a bit

Clean up a bit from https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/229

Namely, move members_to_access_hash to another class AccessLevels as suggested by @DouweM and @jacobvosmaer

Other?