### Summary

GalaxyNG just added the capability to use [Keycloak for user integration/authentication](https://github.com/ansible/galaxy_ng/pull/889), instead of using DRF tokens it would be great to be able to use Keycloak tokens with `ansible-galaxy` CLI. `ansible-galaxy` CLI has the ability to use Keycloak tokens today in order to work with Public Automation Hub on console.redhat.com. However, it won't work with GalaxyNG + Keycloak because the client ID in the code for refreshing tokens is [hardcoded](https://github.com/ansible/ansible/blob/bf7d4ce260dc4ffc6074b2a392b9ff4d3794308b/lib/ansible/galaxy/token.py#L60) to `cloud-services` to work with the Red Hat SSO.

It would be great to be able to supply an override configuration variable for the client ID.

### Issue Type

Feature Idea

### Component Name

ansible-galaxy

### Additional Information

As described in the galaxy [download a collection section](https://docs.ansible.com/ansible/latest/galaxy/user_guide.html#downloading-a-collection-from-automation-hub)

Instead of supplying:
```
[galaxy]
server_list = automation_hub

[galaxy_server.automation_hub]
url=https://cloud.redhat.com/api/automation-hub/
auth_url=https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token
token=my_ah_token
```

You could supply the following:
```
[galaxy]
server_list = my_galaxy_ng

[galaxy_server.my_galaxy_ng]
url=http://my_galaxy_ng:8000/api/automation-hub/
auth_url=http://my_keycloak:8080/auth/realms/myco/protocol/openid-connect/token
client_id=galaxy-ng
token=my_keycloak_access_token
```


### Code of Conduct

- [X] I agree to follow the Ansible Code of Conduct
'''command to manage Ansible roles in shared repositories, the default of which is Ansible Galaxy *https://galaxy.ansible.com*.'''
    SKIP_INFO_KEYS = ("name", "description", "readme_html", "related", "summary_fields", "average_aw_composite", "average_aw_score", "url")
    def __init__(self, args):
        self._raw_args = args
        self._implicit_role = False
        if len(args) > 1:
            
            if args[1] not in ['-h', '--help', '--version'] and 'role' not in args and 'collection' not in args:
                
                
                idx = 2 if args[1].startswith('-v') else 1
                args.insert(idx, 'role')
                self._implicit_role = True
            
            if args[1:3] == ['role', 'login']:
                display.error(
                    "The login command was removed in late 2020. An API key is now required to publish roles or collections "
                    "to Galaxy. The key can be found at https://galaxy.ansible.com/me/preferences, and passed to the "
                    "ansible-galaxy CLI via a file at {0} or (insecurely) via the `--token` "
                    "command-line argument.".format(to_text(C.GALAXY_TOKEN_PATH)))
                sys.exit(1)
        self.api_servers = []
        self.galaxy = None
        self._api = None
        super(GalaxyCLI, self).__init__(args)
    def init_parser(self):