Signs users in with Google and turns their direct Google Group memberships (group emails, lowercase) into Jenkins authorities, for use in an authorization strategy such as Role Strategy or Matrix Authorization. The username/password form on the login page keeps working for existing local users, as a break-glass path if Google login is unavailable.