Fix OIDC email and group claims extraction from ID token for AD FS

[TheNegativePozitive]

Description

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactor / Chore

Technical Details

• Database changes: [Yes/No]
• Storage backend affected: [No, Local, S3, Both]
• Usage of AI: [No / If yes please give details]

How Has This Been Tested?

• Manual Testing: (e.g., "Uploaded a file using S3 and verified expiration")
• Unit Tests: go test ./...
• Environment: (e.g., Docker, Linux, Windows)

Checklist

• I have performed a self-review of my own code.
• I have commented my code, particularly in hard-to-understand areas.
• I have made corresponding changes to the documentation.
• My changes generate no new warnings.