Add Keycloak realm import and LDAP role groups

- Auto-import the clustercockpit realm on Keycloak start
- Rewrite the generated LDAP directory with cc-* role groups and dev users
- Move config.json to the main/nats/auth schema; cc-backend now on :8088
- Add resetDev.sh to tear down containers, volumes and generated data
- Bump cc-metric-store build image to golang 1.26.4
- Ignore all of data/ (generated by dataGenerationScript.sh)

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -57,7 +57,11 @@ services:
     ports:
       - "0.0.0.0:8080:8080"
     restart: always
-    command: --verbose start --optimized
+    depends_on:
+      - postgres
+    volumes:
+      - ./keycloak/import:/opt/keycloak/data/import:ro
+    command: --verbose start --optimized --import-realm
 
   mariadb:
     container_name: mariadb