[WFLY-3591] Add keycloak auth to http management endpoint

This PR adds the ability to specify &lt;keycloak/&gt; as the authentication provider for the ManagementRealm in domain-http.  It does not actually pull any Keycloak artifacts into the target build.  On its own, this PR doesn't add any functionality in wildfly-core.  However, this is needed so that Keycloak can be added to wildfly full.
Why are there two different methods of configuration? Everything else in WF is configured via subsystem, I don't think keycloak should have its own method of configuration that is outside the management model.