Support Elytron RoleMapper categories

(Support for this could be added later, just scheduling in current releases for now if we have time)

The Elytron role mapping configuration can contain different mappers for different categories, this issue is to make use of categories for management role mapping.

We need to decide if we use hard coded names, some naming convention which is part hard coded, part based on deployment or a fully configurable category.

On the access=authorization resource this could simply be an optional String 'role-category' if we go for configured. Possibly a boolean to state if we fallback to the default RoleMapping on the domain.