4a2e9675b7
Declaratively manage the group that argocd-rbac-cm maps to role:admin, so onboarding ArgoCD SSO does not require creating the group by hand in the UI.