feat: map upstream Google identity claims

keycloak/import/mock-google-realm.json

@@ -25,7 +25,37 @@
       "redirectUris": [
         "http://localhost:8080/realms/keycloak-patterns/broker/mock-google/endpoint"
       ],
-      "webOrigins": []
+      "webOrigins": [],
+      "protocolMappers": [
+        {
+          "name": "hosted-domain",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-hardcoded-claim-mapper",
+          "consentRequired": false,
+          "config": {
+            "claim.name": "hd",
+            "claim.value": "example.test",
+            "jsonType.label": "String",
+            "id.token.claim": "true",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "true"
+          }
+        },
+        {
+          "name": "picture",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-hardcoded-claim-mapper",
+          "consentRequired": false,
+          "config": {
+            "claim.name": "picture",
+            "claim.value": "https://images.example.test/mock-user.png",
+            "jsonType.label": "String",
+            "id.token.claim": "true",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "true"
+          }
+        }
+      ]
     }
   ],
   "users": [
@@ -51,14 +81,6 @@
       "emailVerified": false,
       "firstName": "Broker",
       "lastName": "Collision",
-      "attributes": {
-        "hd": [
-          "example.test"
-        ],
-        "picture": [
-          "https://images.example.test/mock-collision-user.png"
-        ]
-      },
       "credentials": [
         {
           "type": "password",