Change sync to use Lookup API

In preparation for using the newly exposed cancelledDate from Lookup to delete long-time cancelled G Workspace account.

Change the sync from using a ldap query (that won't include any cancelled people) to use the Lookup API.