sogo-config template: sogoUserSources elements order matters. Refs #2808

SOGo scans SOGoUserSources in reverse order, searching a matching LDAP
node. By querying the ou=Groups at first, we ensure the posixGroup is
properly found.

Ensure memberUid attribute is set also for user primary group nodes,
otherwise share-by-user does not work!