Refactor `LDAPGroupSync` worker to clean it up a bit
Clean up a bit from https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/229
Namely, move members_to_access_hash
to another class AccessLevels
as suggested by @DouweM and @jacobvosmaer
Other?