* added a group and mapper to keycloak w/ burnettk
* accept an internal uri to keycloak w/ burnettk
* pyl w/ burnettk
* the only time we ever use internal arg to open_id_endpoint_for_name we want it True
* protect users of openid urls from internal urls
* allow port 8000/8001 for docker and avoid public urls when using requests again
* allow 8001 frontend in docker compose post logout redirect url
---------
Co-authored-by: jasquat <jasquat@users.noreply.github.com>
Co-authored-by: burnettk <burnettk@users.noreply.github.com>