Service Eligibility Support for Org Identity Sources/Pipelines

It should be possible to drive Service Eligibilities from Org Identity Sources, possibly via Pipeline Plugins. (Data Filter plugins aren't really supposed to have side effects, so something else would be needed to map the OIS record to the appropriate Eligibility and persist it.)