Similarly to T418579: Implement a maintenance script to demote users who don't meet conditions specified in $wgRestrictedGroups, there should exist a script, which checks if members of restricted global groups meet the conditions, and if not – demote users from those groups.
Acceptance criteria
- The script can only be run on the CentralAuth central wiki.
- The script ignores groups absent from $wgRestrictedGroups.
- The script ignores groups present in $wgRestrictedGroups, but irrelevant to centralauth scope.
- For restricted (and relevant) groups, the script only processes ones that are configured to allow autodemotion.
- Every group removal is logged on the wiki's 'gblrights' log.