keycloak: do not allow full scope for openid gitlab client

We do not want full scope to be allowed for the gitlab openid client. In
fact we already have it disabled, however the latest provider seems to
have changed something which makes terraform to have the desire to
change this to true. Set it explicitly to false to avoid changing
behavior.

tf-stage2/keycloak.tf

@@ -165,6 +165,7 @@ resource "keycloak_openid_client" "openid_gitlab" {
 
   access_type = "PUBLIC"
   standard_flow_enabled = true
+  full_scope_allowed = false
   valid_redirect_uris = [
     "https://gitlab.archlinux.org"
   ]