tf-stage2: update keycloak provider to 3.8.1

OpenID clients:

• use_refresh_tokens set to false to preserve the values on live
• backchannel_logout_session_required implicitly changed to true for the 'grafana_openid_client' and 'openid_gitlab' clients

SAML client (GitLab):

• front_channel_logout set to false to preserve the live setting

changed the description

Official Docs per item changed:

• openid_client#use_refresh_tokens

• openid_client#backchannel_logout_session_required

• saml_client#front_channel_logout

LGTM

approved this merge request

approved this merge request

mentioned in commit 2c3ba2c4

merged