Support user scopes (in addition to patient scopes) by default

[lmsurpre]

The default keycloak-configure should create scopes for the wildcard user/*.read and each individual user/[resourceType].read that is supported with the patient scope.

https://chat.fhir.org/#narrow/stream/179170-smart/topic/Volume.20of.20Smart.20Scopes/near/235442135

the ONC standardized API certification tests in Inferno require demonstrating an app launched with patient scopes for all USCDI-relevant resources¹, and separately an app launched with user scopes. So you need to show both.