more impl and demo start

Make HTML5 apps deployable as WAR.  Make examples-realm.json for easy

KEYCLOAK-4924: pairwise clients get duplicate subs in tokens

Modifications for correct default flows

fix errors introduced by snowpack refactoring

# This is the 1st commit message:

Fix race condition in SAML DocumentBuilderFactory creation

Closes keycloak#44438

Signed-off-by: martins <martin.soderstrom@aurorainnovation.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
# The commit message keycloak#2 will be skipped:

# fix keycloak#43819 - partial import fails to overwrite existing groups (keycloak#43924)
#
# * fix keycloak#43819 - partial import fails to overwrite existing groups
#
# - when removal is delayed until insertion of the newly imported group
#   this causes a duplicate key constrain violation (`Key (realm_id, parent_group, name)`)
# - fixed by flushing group removals
#
# Signed-off-by: Martin Nowak <code@dawg.eu>
#
# * adding a test and using a general fix
#
# Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# # Conflicts:
# #	services/src/main/java/org/keycloak/partialimport/PartialImportManager.java
#
# ---------
#
# Signed-off-by: Martin Nowak <code@dawg.eu>
# Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Co-authored-by: Steve Hawkins <shawkins@redhat.com>

# The commit message keycloak#3 will be skipped:

# Always allow to setup JWKS URL in oidc idp
#
# Closes keycloak#44217
#
# Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>

# The commit message keycloak#4 will be skipped:

# Update translation files (keycloak#44444)
#
# Updated by "Cleanup translation files" hook in Weblate.
#
# Signed-off-by: Hosted Weblate <hosted@weblate.org>

# The commit message keycloak#5 will be skipped:

# Promote MDC Logging Feature to Supported State
#
# Closes keycloak#41205
#
# Signed-off-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
# Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
# Co-authored-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
# Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>

# The commit message keycloak#6 will be skipped:

# Stop looking up client in ClientAssertionState to prevent lookup by clientId in federated client authentication (keycloak#44448)
#
# Closes keycloak#44447
#
# Signed-off-by: stianst <stianst@gmail.com>

# The commit message keycloak#7 will be skipped:

# When joining a group, don't rely on cached values if user has already been updated
#
# Closes keycloak#44480
#
# Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>