### Summary

GalaxyNG just added the capability to use [Keycloak for user integration/authentication](https://github.com/ansible/galaxy_ng/pull/889), instead of using DRF tokens it would be great to be able to use Keycloak tokens with `ansible-galaxy` CLI. `ansible-galaxy` CLI has the ability to use Keycloak tokens today in order to work with Public Automation Hub on console.redhat.com. However, it won't work with GalaxyNG + Keycloak because the client ID in the code for refreshing tokens is [hardcoded](https://github.com/ansible/ansible/blob/bf7d4ce260dc4ffc6074b2a392b9ff4d3794308b/lib/ansible/galaxy/token.py#L60) to `cloud-services` to work with the Red Hat SSO.

It would be great to be able to supply an override configuration variable for the client ID.

### Issue Type

Feature Idea

### Component Name

ansible-galaxy

### Additional Information

As described in the galaxy [download a collection section](https://docs.ansible.com/ansible/latest/galaxy/user_guide.html#downloading-a-collection-from-automation-hub)

Instead of supplying:
```
[galaxy]
server_list = automation_hub

[galaxy_server.automation_hub]
url=https://cloud.redhat.com/api/automation-hub/
auth_url=https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token
token=my_ah_token
```

You could supply the following:
```
[galaxy]
server_list = my_galaxy_ng

[galaxy_server.my_galaxy_ng]
url=http://my_galaxy_ng:8000/api/automation-hub/
auth_url=http://my_keycloak:8080/auth/realms/myco/protocol/openid-connect/token
client_id=galaxy-ng
token=my_keycloak_access_token
```


### Code of Conduct

- [X] I agree to follow the Ansible Code of Conduct
role_file = context.CLIARGS['requirements']
        no_deps = context.CLIARGS['no_deps']
        force_deps = context.CLIARGS['force_with_deps']
        force = context.CLIARGS['force'] or force_deps
        for role in requirements:
            
            if role_file and context.CLIARGS['args'] and role.name not in context.CLIARGS['args']:
                display.vvv('Skipping role %s' % role.name)
                continue
            display.vvv('Processing role %s ' % role.name)
            
            if role.install_info is not None:
                if role.install_info['version'] != role.version or force:
                    if force:
                        display.display('- changing role %s from %s to %s' %
                                        (role.name, role.install_info['version'], role.version or "unspecified"))
                        role.remove()
                    else:
                        display.warning('- %s (%s) is already installed - use --force to change version to %s' %
                                        (role.name, role.install_info['version'], role.version or "unspecified"))
                        continue
                else:
                    if not force:
                        display.display('- %s is already installed, skipping.' % str(role))
                        continue
            try:
                installed = role.install()
            except AnsibleError as e: