Add Microsoft 365 SCIM bridge and access review driver

Microsoft 365's native SCIM endpoint is unreliable, so mirror the
Google Workspace bridge over Microsoft Graph: a new MICROSOFT_365
OAuth2 connector, a SCIM bridge provider listing /v1.0/users with
$select pagination, and an access review driver that derives admin
status from /directoryRoles members. Refactor the bridge runner to
share OAuth2 plumbing across providers and surface the new bridge
type, scopes, UI card, and bootstrap env wiring.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

pkg/server/api/connect/v1/graphql/scim.graphql

@@ -51,6 +51,8 @@ enum ConnectorProvider
   SLACK @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderSlack")
   GOOGLE_WORKSPACE
     @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderGoogleWorkspace")
+  MICROSOFT_365
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderMicrosoft365")
   BREX @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderBrex")
   TALLY @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderTally")
   CLOUDFLARE
@@ -60,6 +62,7 @@ enum ConnectorProvider
 enum SCIMBridgeType
   @goModel(model: "go.probo.inc/probo/pkg/coredata.SCIMBridgeType") {
   GOOGLE_WORKSPACE @goEnum(value: "go.probo.inc/probo/pkg/coredata.SCIMBridgeTypeGoogleWorkspace")
+  MICROSOFT_365 @goEnum(value: "go.probo.inc/probo/pkg/coredata.SCIMBridgeTypeMicrosoft365")
 }
 
 type SCIMBridgeTypeInfo {

pkg/server/api/connect/v1/organization_resolvers.go

@@ -15,6 +15,7 @@ import (
 	"go.probo.inc/probo/pkg/coredata"
 	"go.probo.inc/probo/pkg/iam"
 	"go.probo.inc/probo/pkg/iam/scim/bridge/provider/googleworkspace"
+	"go.probo.inc/probo/pkg/iam/scim/bridge/provider/microsoft365"
 	"go.probo.inc/probo/pkg/page"
 	"go.probo.inc/probo/pkg/server/api/authn"
 	"go.probo.inc/probo/pkg/server/api/authz"
@@ -279,6 +280,10 @@ func (r *organizationResolver) ScimBridgeTypes(ctx context.Context, obj *types.O
 			Type:         coredata.SCIMBridgeTypeGoogleWorkspace,
 			Oauth2Scopes: googleworkspace.OAuth2Scopes,
 		},
+		{
+			Type:         coredata.SCIMBridgeTypeMicrosoft365,
+			Oauth2Scopes: microsoft365.OAuth2Scopes,
+		},
 	}, nil
 }
 

pkg/server/api/console/v1/graphql/connector.graphql

@@ -27,6 +27,10 @@ enum ConnectorProvider
     INTERCOM
         @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderIntercom")
     RESEND @goEnum(value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderResend")
+    MICROSOFT_365
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.ConnectorProviderMicrosoft365"
+        )
 }
 
 type ConnectorProviderInfo {