Add LDAP authentication with role-based OPC UA permissions

Replace static user list with GLAuth LDAP authentication. Group
membership (ReadOnly, ReadWrite, AlarmAck) maps to granular OPC UA
permissions for write and alarm-ack operations. Anonymous can still
browse and read but not write.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/ZB.MOM.WW.LmxOpcUa.Host/ZB.MOM.WW.LmxOpcUa.Host.csproj

@@ -34,6 +34,11 @@
     <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="6.0.0" />
   </ItemGroup>
 
+  <ItemGroup>
+    <!-- LDAP authentication -->
+    <Reference Include="System.DirectoryServices.Protocols" />
+  </ItemGroup>
+
   <ItemGroup>
     <!-- MXAccess COM interop -->
     <Reference Include="ArchestrA.MxAccess">