[PROD-1230] - ADR for upcoming update for certificate_available_date.

ENT-2730: Apply same username restrictions during SSO pipeline

Bump edx-enterprise to 3.2.8

EDUCATOR-4990 - Modify team membership via CSV upload. Slight refactoring - removal happens post static validation

* Commits:
  Revert "Add logging to Learning MFE iframe, temporarily"

Revert "add logs for debugging"

Constrain ddt<1.4.0 until this issue is fixed:
- https://github.com/datadriventests/ddt/issues/83

Enable access role in django admin

Strip non-numeric characters from phone number

Apply same username restrictions during SSO pipeline as we have user registeration flow to avoid SSO flow breakage at the time of user creation.
ENT-2730

Code quality fixes

Allows user to type in phone number in whichever
format they prefer.

Missing translation function call

Enable masquerade on dates tab

Revert "Dark launch: Fix site shadowing and 1+N queries in third party auth config fetching (#23824)" (#23935)

This reverts commit 79420640.

MST-181: Add the ability to unlink and relink Program Enrollments via Support Tool to Address SSO Issues

PROD-1427

This reverts commit 2ddc35cd.

Fix naive offset-naive/aware error in asset compilation [CRI-191]

* Fix all stylelint errors

For any errors that fixing would require changing the output of the css disable stylelint for that line instead of modifying.

* Update quality.py

Make stylelint quality check pass when there are no errors

* Delete empty selectors

The XBlockPackageStorage used to return offset-naive datetime objects
which were compared to offset-aware objects when we ran static asset
collection:

    ./manage.py lms collectstatic

Close CRI-191

Enhance the Link Program Enrollments Support Tool to handle the case of linking a learner to a ProgramEnrollment that is already linked to a different edX account.

In this case,
* unenroll the currently linked learner from the courses associated with related ProgramCourseEnrollments
* for each course the is enrolled in as part of a ProgramCourseEnrollment, if the coures has an audit track, then move the enrollment into the audit track. Otherwise, keep the learner's enrollment in the existing track.
* link the new user to the ProgramEnrollment
* enroll the new user in the Master's track in the courses associated with related ProgramCourseEnrollments

This performs a dark launch compare of the existing implementation
(still in use) for fetching TPA provider configs and a new
implementation, recording metrics on exceptions and mismatches.

The new implementation should have two benefits, once we're switched
over:

- Fix 1+N queries on login page view where the site for each config
  was fetched in a loop (ARCHBOM-1139)
- Don't allow configs with the same key on different sites to
  interfere with each other (regression test added)

The new impl does not use TieredCache, but only the request cache,
which we may want to adjust later.

AA-67: New resolver logic for weekly highlights

AA-99: Adding in new date pills for the dates tab

- remove unused assertions
- add tests for exception handling
- update error message

Improved authentication metrics.

Bokchoy ADR Updates.

Redirect to courseware MFE, including unit