Abstract current keycloak implementation and allow for assigning students to custom groups

[niclasheun]

Add an API endpoint in the core, which allows to assign a group of students to a custom keycloak group (i.e. a team).

Hereby it is crucial to ensure that the groups are in subgroup to ensure that no access right escalation (to i.e. adding students to an admin group) can be acheived