Keycloak permission manager

[leoraba]

fix #373 Integrate Keycloak as an Authorization Server.

changes:

• Use the default Spring Security JwtAuthenticationProvider for JWT instead of DefaultTokenServices
• Use a custom Auth provider(ApiKeyIntrospector) for ApiKeys
• Maven dependencies updates(SpringBoot, Spring Cloud, Swagger, Spring Security Oauth2)
• Removal of profile jwt as now JWT and ApiKeys auth configuration is already included in secure profile

[joneubank]

Capturing need for documentation: https://github.com/overture-stack/score/issues/417