ARGO-302: add support for renamed DOR-wide roles: dlss:dor-admin -> sdr:...

...administrator-role, dlss:dor-manager -> sdr:manager-role, dlss:dor-viewer -> sdr:viewer-role

sorry, that wasn't the best commit message, in retrospect.  what actually got renamed here are the "dor-administrator" and "dor-viewer" roles that are defined in APOs (and which list workgroups/users), so that the APO role names would better correspond with the new workgroup names.  since both workgroup namings still exist at present (with the dlss:dor- groups as aliases for the new sdr: groups), this code change adds support for the new role/group names while leaving support for the old role/group names in place for now.  when the old group names no longer exist and the old role names have all been switched to the new ones, we can pull support for the old names.