Set token-expires from a group attribute or property mapping

## What

set goauthentik.io/user/token-expires via group attribute / property mapping rather than per-user only.

## Want

- Set goauthentik.io/user/token-expires via group attribute / property mapping rather than per-user only

## Ideas this came from

- [#9227 Setting `goauthentik.io/user/token-expires` by group attribute](https://github.com/goauthentik/authentik/issues/9227) — I'm using LDAP login and want to allow a set of users to create no-expiring app-passwords, the docs said goauthentik.io/user/token-expires can be used for that,
- [#9395 How to set attributes.goauthentik.io/user/token-expires Object in property mapping](https://github.com/goauthentik/authentik/issues/9395) — Describe your question/ How to set attributes.goauthentik.io/user/token-expires Object in property mapping Need escape . And \ "" not working Relevant info Scre

Start by locating how goauthentik.io/user/token-expires is handled and how group attributes and property mappings are evaluated. Compare the existing per-user behavior with the requested group-based behavior, and define completion as allowing the token-expiration value to be supplied through either mapping mechanism.

Written by the indexing model from the issue text.