Grant API rights to Shibb group members

Overview of the Feature Request
User permissions on a dataset or a dataverse collection granted via Shibboleth group do not translate to API permissions.
Here is a proposal to be able to grant them API rights identical as the UI's while taking into account that a Shibboleth user can be removed from a federation while its token remains valid :
https://docs.google.com/document/d/1RNjTmdf5vDe4KnvyjlHb4a_HHdwKnRC7FLIfzZJ9I8Q/edit?usp=sharing

What kind of user is the feature intended for?
(Example users roles: API User, Curator, Depositor, Guest, Superuser, Sysadmin)
API User, member of a Shibboleth group

What inspired the request?
Our use of Shibboleth group to give defaults rights to our collection (see the Background section of the proposal)

Any brand new behavior do you want to add to Dataverse?
Grant API access to Shibboleth group members if they are still active.

Any open or closed issues related to this feature request?

Start by reading the linked proposal and comparing its requirements with Dataverse's existing UI permission behavior. Focus on granting equivalent API rights to Shibboleth group members while accounting for users removed from a federation whose tokens remain valid. Done means the requested access behavior is implemented and verified against those membership and token cases.