The review discovered that the sync tool, when run on production, would never
succeed because the membership list of some groups/institutions was so large
that the API response exceeded the size limit imposed by API Gateway (due to
Lookup API returning detailed lists of members). This commit refactors the code
to fetch group/institution membership for each user and use that to populate
the membership set for each group/institution.

Use Python 3.9 in Dockerfile as new Python features are now used.

Update version of Flake8 so the checks are compatible with the newer version
of Python.

Remove redundant function `_extract_uid()`.

Modify Flake8 configuration to exclude the standard set of folders used across
projects.

Add settings for Lookup API and API Gateway credentials.

Add Lookup API operations to replicate the LDAP operations for gathering
information about users, groups and institutions.

Remove LDAP sync code and related configuration code.

Remove LDAP configuration options from the example file.

Remove LDAP library as a requirement it is no longer needed.

Remove LDAP references from documentation.

Add information to the README about how to provide API Gateway credentials.

Add YAML versions of API Gateway credentials file to `.gitignore`.

To facilitate running the sync tool outside of the CUDN (such as when testing
remotely), this commit adds configuration options for specifying credentials
for authenticating with the LDAP server over SSL. SSL will automatically be
used when these credentials are supplied.

Add `tox.sh` script for running tox tests locally.

We often need to call the Google API with large numbers of requests
(thousands), so the API is called with batches of requests. Quota limits are
often hit, so logging when an individual batch has completed gives confidence
that progress is being made. This commit adds this logging.