New hook for AEMaaCS after IMS-sync (when user logged in)

[krystian-panek-vmltech]

whenever new groups on AEM are created by IMS-sync after logging in users, then APM could assign groups to these newly created group. it would be nice to hook into such moment to have permissions in-sync with IMS.

that hook should be lightweight and used only to run a APM script which is only creating/assigning groups. not to purge/apply policies to the whole content.