Function validate_scim_user_identity 

pub fn validate_scim_user_identity(
    user_name: &str,
    emails: &[ScimEmail],
) -> Result<String, ScimError>

Validates userName and optional emails, returning the canonical lowercased email.