feat: add ability to provision entra login sources using blueprints

roles/authentik/templates/blueprints/blueprint-login-sources.yaml.j2

@@ -0,0 +1,18 @@
+# yaml-language-server: $schema=https://goauthentik.io/blueprints/schema.json
+version: 1
+metadata:
+  name: "login-sources"
+  labels:
+    blueprints.goauthentik.io/instantiate: "true"
+    blueprints.goauthentik.io/description: "Set sources on the identification stage"
+
+entries:
+  - model: authentik_stages_identification.identificationstage
+    identifiers:
+      name: "{{ authentik_identification_stage_name }}"
+    attrs:
+      # NOTE: this SETS the sources list (it doesn’t append).
+      sources:
+{% for src_id in authentik_login_source_ids %}
+        - !KeyOf {{ src_id }}
+{% endfor %}