Support SSO initiated saml / oauth / oidc login from Moodle into Matomo

[brendanheywood]

This will provide a 1-click report link from Moodle take you into Matomo specific to the reports for the beacon id in this moodle, auto provision your account along the way if needed.

• extends on idea in Deep link from Moodle into the report for this beacon id #33
• admin settings for auth setup
• account exclusion rules, ie certain staff will get a normal link and some will get an IdP saml init link (is this needed?)
• figure out how to auto create accounts and provision them automatically on the matomo side
• lots of auth setup docs
• create a new admin menu report item which redirects to matomo in a new tab
• wrap it in permissions to allow a specific new capability to link to matomo
• when provisioning accounts need to handle the security so an admin on site A cannot create an account with an email which clashes with an unrelated site B and gain access to their data. Thinking that account provisioning needs to have an allow list of email domains, and it could default to include the domain of the moodle and its parent domain + an optional extra allow list of domains in the plugin which can be force set in config.php