With certain permissions on the Vercel token, a get team request can return JSON that looks like:

{
  ...
  "saml": {
    ...
    "roles": {
      "a": { "accessGroupId": "b" }
    }
  },
  ...

This fails to parse because we are expecting only JSON of the form:

{
  ...
  "saml": {
    ...
    "roles": {
      "a": "ROLE"
    }
  },
  ...

This PR parses both forms and only exposes the role based form. Since we use PATCH for updating these states, it should be non-destructive when omitting this information coming from the API.