feat(SSO): support authentication with OIDC (#658)

* feat(SSO): support authentication with OIDC

- add servlet filter and authentication manager
- support tenant configuration
- add compose file for manual tests
- add api to authentication filter
- exclude jackson to avoid conflict with the version provided by engine
- pass through keycloak OIDC filter even though there is a bonita
session or the URL is public if there is an OIDC account in the session
to avoid not detecting session change or invalid
- add specific authentication filter for the REST API in order to
benefit from the isAlready logged in rule that recreate the session if
the authentication manager lets you in

Covers [RUNTIME-57](https://bonitasoft.atlassian.net/browse/RUNTIME-57

)

Co-authored-by: hugues.bretin <hugues.bretin@bonitasoft.com>