Create LDAP / AD Provisioner

Create a simple changelog consumer + bulk provisioner to replace the PSP that talks to LDAP/AD. Plug-in should be small, simple, do one thing (push memberships) do it well, and do it FAST.