The review discovered that the sync tool, when run on production, would never
succeed because the membership list of some groups/institutions was so large
that the API response exceeded the size limit imposed by API Gateway (due to
Lookup API returning detailed lists of members). This commit refactors the code
to fetch group/institution membership for each user and use that to populate
the membership set for each group/institution.

Use Python 3.9 in Dockerfile as new Python features are now used.

Update version of Flake8 so the checks are compatible with the newer version
of Python.

Remove redundant function `_extract_uid()`.

Modify Flake8 configuration to exclude the standard set of folders used across
projects.

Provide an initial implementation f the tool and README documenting how
to install, configure and run it.

Closes #1