added keycloak, removed ollama

[hohwille]

WIP:

Working/solved:

• keycloak working
• realm jba autoconfigured with client app for to connect with quarkus app via OIDC
• Roles/permissions created - tried both global ones with app. prefix and local ones inside the client (would be preferred but I am not sure if we get those into JWT).

TODO:

• isolate keycloak DB and Quarkus app DB via separate postgres DBs or schemas.
• create users Admin, User, Reader (I thought I added those but not available in admin UI).
• assign users with according permissions
• prepare quarkus config so login is delegated to keycloak via OIDC and JWT is created and used by quarkus app.