docs: custom Role Claim Support in guard-azure-ad (aklivity#322)

Author: ankitk-me

src/concepts/security/guard/azure-ad/README.md

@@ -65,6 +65,7 @@ The `azure-ad` specific options.
 | options.version   | `enum` [ `v1.0`, `v2.0` ] | Default: `v2.0`             |
 | options.challenge | `integer`                 | Challenge period (seconds). |
 | options.identity  | `string`                  | Default: `sub`              |
+| options.roles     | `string`                  | Default: `roles`            |
 
 :::
 

src/reference/config/guards/azure-ad.md

@@ -86,3 +86,9 @@ Challenge period (seconds).
 > `string` | Default: `sub`
 
 Claim to extract the user's identity from the token.
+
+#### options.roles
+
+> `string` | Default: `roles`
+
+Claim to check for authorized roles.