feat: featureflag for auto tagging T0 AD group members

[JonasBK]

Description

Add a feature flag to enable/disable auto-tagging of Tier Zero AD group members

Ticket: BP-702

Motivation and Context

Some users (mostly BHE users) prefer no automatic Tier Zero tagging of Tier Zero AD group members as they would like to manually verify new members of Tier Zero groups. The feature flag allows them to disable the auto-tagging.

For BHE users, disabling the member auto-tagging will result in MemberOf findings, which comes with the BHE pull request 536. That PR should be merged at the same time as this PR.

How Has This Been Tested?

Tested locally. Disabled and enabled it a couple of times to confirm it works.

We should perform a performance test with BHE to confirm that analysis does not increase significantly with this change.

Screenshots (if appropriate):

Types of changes

• Chore (a change that does not modify the application functionality)
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

• Documentation updates are needed, and have been made accordingly.
• I have added and/or updated tests to cover my changes.
• All new and existing tests passed.
• My changes include a database migration.

[JonasBK]

Issue identified. Will investigate.

[JonasBK]

Closing this PR as we will implement the feature later in another way.