mcpg-plugin-identity-ldap

LDAP / Active Directory identity plugin for mcpg (dev.mcpg.identity.ldap). Resolves caller identity by binding to a directory *as the caller* (verifying the password against the directory itself) and projecting the caller's group memberships into roles/groups. Pairs with the `ldap` backend plugin (service-account search).