maws appends "roles" to the id_token_for_roles URL

[gene1wood]

Can the URL instead be a dedicated config setting that points to the roles endpoint and an additional config setting that points to the /rebuild-group-role-map endpoint for rebuild?

So this line would change and we'd establish a new config setting for the rebuild-group-role-map function which isn't yet present in maws