Add gluebuddy client

The gluebuddy client is required for gluebuddy to retrieve users and groups membership without being able to change other keycloak data. The realm-management roles cannot be assigned yet via keycloak as it does not know about the roles and realm-management client.

roles/gluebuddy/files/gluebuddy.service

@@ -5,9 +5,11 @@ After=network-online.target
 
 [Service]
 Type=oneshot
-ExecStart=/usr/local/bin/gluebuddy
+StandardOutput=journal+console
+EnvironmentFile=-/etc/conf.d/gluebuddy
+ExecStart=/usr/local/bin/gluebuddy apply
 
-DynamicUsers=true
+DynamicUser=true
 NoNewPrivileges=yes
 ProtectSystem=full
 ProtectHome=true