Example: HWIOAuthBundle implementation

[tijsverkoyen]

Summary by Sourcery

Add optional Azure Entra ID single sign-on support via HWIOAuthBundle, including user provisioning, role syncing, and login integration alongside existing authentication.

New Features:

• Introduce Azure Entra ID (Microsoft) SSO as an optional authentication method using HWIOAuthBundle.
• Allow optional SumoCoders tenant login alongside the client Azure application.
• Auto-provision new users and link existing accounts based on Azure profile information and roles during SSO login.
• Expose Azure SSO login options on the existing login page when configured via environment variables.

Enhancements:

• Extend the user entity with Azure-specific identifiers and role syncing capabilities to support external identity providers.
• Emit a dedicated AzureLoginEvent on successful SSO logins to integrate with the existing event system.
• Adjust security configuration and routing to support OAuth-based login flows without impacting existing local authentication.

Build:

• Add HWIOAuthBundle as a project dependency and register it in the Symfony bundle configuration.
• Introduce OAuth bundle configuration and routes for Azure and SumoCoders resource owners, plus an optional migration to store Azure object IDs on users.

Documentation:

• Add detailed setup instructions for enabling Azure Entra ID SSO and SumoCoders login, including Azure portal configuration, env vars, and migrations.
• Clarify migration path in the README by pointing to the project-level migrations directory.
• Add Dutch translations for the new Azure and SumoCoders sign-in labels and Azure domain restriction error message.

Tests:

• Add unit tests for AzureUserProvider covering account linking, auto-provisioning, domain restrictions, role synchronization, and login event dispatching.
• Extend user entity tests to cover Azure account linkage, Azure-based user creation, and role handling.

Chores:

• Wire login controller to read Azure and SumoCoders client IDs from environment variables to drive conditional SSO UI state.