List visible user groups as a tree

Returns the user-group tree visible to the authenticated caller, with distinct active-user counts. The result is independent of any project or task assignment.