Update For memberOf Deprecation

entraId has woefully chosen to deprecate the memberOf function used for dynamic membership groups. Hence the solution is to either revise entraId policies or create our own diff engine that diffs membership groups vs expected memberShips and dynamically revises. This should be a cron job that runs through a lambda likely in aws durable execution flows or a new sqs queue.