refactor(admin): split SSO tab into separate Microsoft SSO and LDAP tabs

Replace the single "SSO" tab in tenant edit with two dedicated tabs:
"Microsoft SSO" and "LDAP". Each provider now has its own tab panel
with focused status tiles and config cards, reducing scroll and
cognitive load for admins configuring a single provider.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

i18n/default_de.json

@@ -1413,5 +1413,6 @@
   "Use %s as placeholder for the username. Examples: (&(objectClass=user)(sAMAccountName=%s)) for AD, (&(objectClass=inetOrgPerson)(uid=%s)) for OpenLDAP": "Verwenden Sie %s als Platzhalter für den Benutzernamen. Beispiele: (&(objectClass=user)(sAMAccountName=%s)) für AD, (&(objectClass=inetOrgPerson)(uid=%s)) für OpenLDAP",
   "Username or password not valid": "Benutzername oder Passwort ungültig",
   "Write-only. Leave empty to keep current value.": "Nur Schreibzugriff. Leer lassen, um den aktuellen Wert beizubehalten.",
-  "Your account is deactivated.": "Ihr Konto ist deaktiviert."
+  "Your account is deactivated.": "Ihr Konto ist deaktiviert.",
+  "LDAP": "LDAP"
 }

i18n/default_en.json

@@ -1413,5 +1413,6 @@
   "Use %s as placeholder for the username. Examples: (&(objectClass=user)(sAMAccountName=%s)) for AD, (&(objectClass=inetOrgPerson)(uid=%s)) for OpenLDAP": "Use %s as placeholder for the username. Examples: (&(objectClass=user)(sAMAccountName=%s)) for AD, (&(objectClass=inetOrgPerson)(uid=%s)) for OpenLDAP",
   "Username or password not valid": "Username or password not valid",
   "Write-only. Leave empty to keep current value.": "Write-only. Leave empty to keep current value.",
-  "Your account is deactivated.": "Your account is deactivated."
+  "Your account is deactivated.": "Your account is deactivated.",
+  "LDAP": "LDAP"
 }