elytron-oidc-client schema define "realm" and "provider" to be mutually exclusive in "secure-deployment" 

Clarify in schema comments

Add tests.

"realm" is the legacy configuration that's specific to Keycloak
"provider" is the new configuration that can be used for any OpenID provider
a secure-deployment can only reference one of these