* Fix login with Keycloak 20 by explicit set OAuth scopes

* moved scopes to definition.yml
Co-authored-by: Simon Lichtinghagen <sl@bnmsp.de>