…ompatibility

The get_client() method in python-keycloak expects the internal UUID,
not the clientId string. This change first resolves the clientId to UUID
using get_client_id() before calling get_client().

This fix is compatible with both older and newer versions of python-keycloak.

…-keycloak compatibility

…ception

- Get current scope first before updating
- Merge attribute updates with existing scope data
- Use string values 'true' instead of boolean for Keycloak attributes

- Wrap scope update in try/except to prevent setup failure
- Log warning instead of crashing when scope update fails
- OAuth will still work without custom scope configuration

- Add __setup_google_identity_provider() method to KeycloakDiffgramClient
- Automatically configures Google IDP if GOOGLE_OAUTH_CLIENT_ID and GOOGLE_OAUTH_CLIENT_SECRET are set
- Supports both creating new IDP and updating existing one
- Non-fatal: logs warning if Google OAuth not configured or setup fails
- Allows users to log in with Google accounts

…le OAuth

- Use OAUTH2_PROVIDER_PUBLIC_URL for browser-facing URLs (KeycloakOpenID)
- Keep OAUTH2_PROVIDER_HOST for internal server-to-server API calls
- Add GOOGLE_OAUTH_CLIENT_ID and GOOGLE_OAUTH_CLIENT_SECRET settings
- Enables Google sign-in via Keycloak identity provider

This allows Diffgram to work with Keycloak behind a load balancer where:
- Internal URL: http://keycloak-http.spycoach.svc.cluster.local:8080
- Public URL: https://auth.spycoach.com