portal v0.5.10 with the groups kept in portal (PEOPLE_BACKEND=memberships)

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GT37Z1Xtfd9pUuQtMTg6Yt

.env.example

@@ -9,7 +9,7 @@ PORTAL_HOST=vel.klingenbergbygg.no
 ID_HOST=id.vel.klingenbergbygg.no
 
 # The portal version to run: a tag of https://project.uhhm.no/uhhm/portal
-PORTAL_RELEASE=v0.5.8
+PORTAL_RELEASE=v0.5.10
 
 # The content this instance serves, and reloads live on every push.
 CONTENT_REPO=https://prosjekt.klingenbergbygg.no/tomtervel/questions
@@ -31,6 +31,12 @@ SEED_ADMIN_NAME=
 # and joins this group. Kanidm names are ASCII: redaktor, "Redaktør".
 RESPONSIBLE_GROUP=redaktor
 
+# Where the groups live. `memberships`: portal keeps them itself, a person
+# is their phone number first, and Kanidm only makes the account (until a
+# sign-in everyone already has, like Vipps, takes over). Unset: Kanidm
+# holds the groups too.
+PEOPLE_BACKEND=memberships
+
 # A project Gitea they may sign in to with the same account: kanidm-setup
 # makes its OAuth2 client (only RESPONSIBLE_GROUP may use it) and, on the
 # host that runs that Gitea, adds the sign-in source. Empty: no Gitea.