Trigger Azure Group Sync from SAML overage claim

Parse Azure overage claims from SAML response and, when present, trigger Azure Group Sync worker.

Related to #414873 (closed)

See https://learn.microsoft.com/en-us/security/zero-trust/develop/configure-tokens-group-claims-app-roles#group-overages for Microsoft documentation.