settings: remove unused ADMIN_MANAGED_GROUPS

This is not needed anymore with the changes to the group infrastructure
which add an optional 'ldap_name' to groups whose membership should be
managed by LDAP queries and shib sessions.