Get Group Authorized Objects

Inverted view of FGA: every object a group has direct access to.

objects_by_type is keyed by camelCase FGA object types (so the JSON payload is applicationInstance / moduleInstance); each value is the deduplicated, alphabetically sorted list of grants where the principal is group:{id}#member.