Update auth middleware to use a new okta group for AI endpoint. The AI access groups should be stored in Kanopy secrets as a separated by commas list, so we could specify more than one group if we want.