Update mapping records from reusable sub-zap inputs automatically

Your role-to-group mapping sheet falls out of date when group updates arrive, causing access gaps. Keep the mapping master current so provisioning reflects changes before the next run.