Keycloak auth manager: enforce team‑scoped authorization (AIP‑67) (#61351)

https://github.com/apache/airflow/commit/4ed9873db7efa26ed03e84ffd4dcc40b204d0fc9