Bump keycloak to latest version

This included moving the feature to build time, see owl-corp/pydis-keycloak-theme@e0b1e8a

Author: ChrisLovering

kubernetes/namespaces/tooling/keycloak/configmap.yaml

@@ -7,7 +7,6 @@ data:
   # Set the hostname for outbound traffic and enable the feature to read that
   # environment variable
   KC_HOSTNAME: "id.pydis.wtf"
-  KC_FEATURES: "hostname:v2,passkeys"
 
   # Set the location of the TLS certificates generated by Vault
   KC_HTTPS_CERTIFICATE_FILE: "/vault/secrets/server.crt"

kubernetes/namespaces/tooling/keycloak/deployment.yaml

@@ -32,7 +32,7 @@ spec:
       serviceAccountName: internal-tls-issuer
       containers:
         - name: keycloak
-          image: ghcr.io/owl-corp/keycloak:25.0.4
+          image: ghcr.io/owl-corp/keycloak:26.1.1
           imagePullPolicy: Always
           envFrom:
             - secretRef: