Register rapp-qonto KeyCape client

sso-mfa/k8s/keycape/create-secrets.sh

@@ -131,6 +131,15 @@ clients:
     allowedScopes: ["openid", "profile", "email", "groups"]
     grantTypes: ["authorization_code"]
     clientType: "public"
+  - clientId: "rapp-qonto-client"
+    displayName: "rapp-qonto workload"
+    allowedScopes: ["qonto:read"]
+    grantTypes: ["client_credentials"]
+    clientType: "confidential"
+    secretRef: "env:KEYCAPE_RAPP_QONTO_CLIENT_SECRET"
+    serviceSubject: "rapp-qonto"
+    tenant: "tenant:friendly:binky"
+    roles: ["qonto-reader"]
 EOF
 )