Trackbone policies

Add a new vault_roles module included in all keycloak-vault configurations

This new module is design to describe all vault policies that we want to provision in vaults It also describe different roles (could be approle, k8s...) that uses theses policies.

The first objective is to implement the provisioning of approles that will be used by trackbone.

trackbone runs on each infra zone and some configurations needs access to cloud vaults or corp vault.

The trackbone approle is provided by concourse to the trackbone job. With this approle trackbone is able to read approles for the different vaults it needs access to (depending on the configuration that is run).

keycloak-vault-cloud create a secret in vault-infra with approle secret_id, role_id as we know the vault infra is present

For keycloak-vault-corp it is different because the infra vault is bootstrapped after vault corp. So the approle secret_id, role_id is written in vault corp, then copied in vault infra when it is bootstrapped.