feat(keycloak): add the Trusted Hosts policy for anonymous client registration to use the DCR API

[octavepre]

Description

Restrict anonymous Dynamic Client Registration to trusted hosts (*.svc.cluster.local, *.okdp.sandbox) to prevent uncontrolled registrations from external hosts.

Related Issue

Fixes #29

Type of Change

• Bug fix
• New feature
• Documentation update
• Refactor / chore
• Breaking change

How to Test

Once you have packaged and deployed it, you are able to register a client named trino-dcr using the following command

curl -v -k \
  -H "Content-Type: application/json" \
  -d '{
    "client_name": "trino-dcr",
    "redirect_uris": ["https://trino-default.okdp.sandbox/oauth2/callback"],
    "grant_types": ["authorization_code", "client_credentials"],
    "application_type": "native",
    "logo_uri": "https://landscape.cncf.io/logos/008125b82108f19aea6b0004ce5f255b72bab5b5e5c169a302d7bf845edb8e6b.svg"
  }' \
  "https://keycloak.okdp.sandbox/realms/master/clients-registrations/openid-connect/"

Checklist

• I have tested my changes
• Documentation updated if needed
• If breaking change: migration path described above
• I hereby declare this contribution to be licensed under the Apache License Version 2.0.
• I hereby agree to grant TOSIT a copyright license to use my contributions.

[SteBaum]

Increase the package tag to 24.4.11-p08