Integrate SSO into 3.6 Ref Arch (#739)

* Add Keycloak/SSO Support
* Make sure sso install occurs after ocp is done
* Add sso/keycloak to 3.6 ha ref arch
* switch to localhost for initial part of setup-sso.yml
* Change restart after sso
* Change to same password and switch to upstream repo