Setup a centralized authentication service

Unify authentication across most services.

Probably using keycloak as an implementation of OAuth2/OIDC.

---

Migrated from T2162 (view on Phabricator)