OPENIDM-4453: sync users of roles when roles are sync'd

OPENIDM-4775: 'validate' attribute for collection relationships should be within items config.

OPENIDM-4557: create relationship validators.

OPENIDM-4488: reverse side of roles and managers needed to be validate=true too.

OPENIDM-4441 only fetch relationship fields that are not hidden or have been explicitly requested

OPENIDM-4453: sync script on assignments to sync users of roles of the assignment being sync'ed

[OPENIDM-4420] Moved managed object properties config into schema.

OPENIDM-4247: delete update-users-of-role.js in favor of utilizing OPENIDM-4387

OPENIDM-4336 : Reverting a change made during Chad's commit b31a18cdb1b7c0bd3b3436df2992af32f0dd21a9. Most likely a paste-over the existing group object.

[OPENIDM-4335] Moved "returnByDefault" and "isVirtual" flags to always be at base of property schema.

[OPENIDM-4223] Updated samples for assignment refactoring

http://sources.forgerock.org/cru/CR-3243 - OpenIDM updates to samples 1 through 4 Doesn't include sample3 updates

Added new sample for sync of LDAP group objects