LDAP nested and indirect group membership does not resolve

## What

Same LDAP nested/indirect membership bug: parent/child group membership from FreeIPA/LDAP does not resolve (memberOf vs member). #18542 cites the older closed #2464 as the same issue returning. Also: LDAP group membership after sync is wrong (indirect/FreeIPA empty members / memberships cleared by group.users.set()). Overlaps the high-conf #7791 group — review whether these are one fix or three.

## Want

- #18542 cites the older closed #2464 as the same issue returning
- LDAP group membership after sync is wrong (indirect/FreeIPA empty members / memberships cleared by group.users.set())
- Overlaps the high-conf #7791 group — review whether these are one fix or three

## Ideas this came from

- [#7791 LDAP Source: Indirect Memberships not working](https://github.com/goauthentik/authentik/issues/7791) — Describe your question/ FreeIPA supports indirect group memberships, meaning you can be member of a group by being member of a child group. The problem stems fr
- [#18542 LDAP Parent Group Nesting Does Not Work](https://github.com/goauthentik/authentik/issues/18542) — This seems to be an old bug that has re-appeared after searching through previous issues: https://github.com/goauthentik/authentik/issues/2464 I'm having this e
- [#21040 LDAP Sync removes group memberships after every sync (group.users.set() clears members)](https://github.com/goauthentik/authentik/issues/21040) — After every LDAP sync, all group memberships are cleared for LDAP-synced users. The sync correctly imports users and groups (with ldapuniq), but the membership
- [#23757 LDAP source (FreeIPA): membership for newly created groups never syncs (users_obj stays empty)](https://github.com/goauthentik/authentik/issues/23757) — When a new group is created in FreeIPA (with members) and the LDAP source is synced, the group object propagates to authentik correctly, but its user membership