Enable Keycloak self-registration

Enable and test Keycloak-managed user registration.

Validate:

users can register
new accounts can log in
new users receive appropriate access
first login creates or initializes an application profile
passwords remain entirely in Keycloak