tasks/upgrade-servers: upgrade keycloak first on its own

matrix.archlinux.org doesn't like it when accounts.archlinux.org is unavailable at start-up.

Try to work around this by upgrading accounts.archlinux.org first and doing a health check before proceeding to update the rest of the servers.