update to use standard gold kc roles

[davidclaveau]

• Update keycloak-js init to use pkceMethod
  • This is a security requirement for Public clients accessing Keycloak Gold
• Update Java security config to look for "client_roles" instead of "roles" to accommodate updated JWT in Gold.