CHEF-3012: Use SID instead of username for group membership checks
Also use sid in excluded_members check, fixes group_spec regression
SID awareness in group base class to fix regression where resource always updates
Add support for Windows domain join spec filter
Windows domain group resource examples
Fix broken unit test break on non-Windows platforms