Update Keycloak configuration and enable persistent storage

Updated Keycloak settings in `realm-hemhub.json` to include additional roles, user attributes, client scopes, and OpenID Connect configurations. Modified `application.yml` to replace `issuer-uri` with `jwk-set-uri` for JWT handling. Enhanced `docker-compose.yml` to include persistent volumes, updated Keycloak image, and environment variables for better container interoperability.

docker-compose.yml

@@ -15,14 +15,23 @@ services:
       retries: 10
 
   keycloak:
-    image: quay.io/keycloak/keycloak:24.0
+    image: quay.io/keycloak/keycloak:24.0.5
     command: ["start-dev","--http-port=8081","--import-realm"]
     environment:
       KEYCLOAK_ADMIN: admin
       KEYCLOAK_ADMIN_PASSWORD: admin
+      # Make issuer consistent & reachable from other containers
+      KC_HOSTNAME: keycloak
+      KC_HTTP_ENABLED: "true"
+      KC_HOSTNAME_STRICT: "false"
+      KC_PROXY: edge
+    ports:
+      - "8081:8081"
     volumes:
-      - ./keycloak:/opt/keycloak/data/import
-    ports: ["8081:8081"]
+      # persist state
+      - keycloak_data:/opt/keycloak/data
+      # import our realm once
+      - ./keycloak/realm-hemhub.json:/opt/keycloak/data/import/realm-hemhub.json:ro
 
 
   api:
@@ -39,3 +48,4 @@ services:
 
 volumes:
   pgdata:
+  keycloak_data: