LDAP role mapping should include custom roles

Background

We support custom roles for SAML group sync already, but need to add support for LDAP sync to map to custom roles.

Making LDAP links configurable with custom roles: #435229 (comment 1825275768)

Dependencies

• Release for post 17.0 to avoid Self-Managed Role Creation changes