Make Keycloak work on Graal 19.3.0

Remove some problematic substitutions and make
bouncycastle classes initialized at runtime to
work around security provider bug

Author: stuartwdouglas

core/runtime/src/main/java/io/quarkus/runtime/graal/SecurityServicesFeatureSubstitutions.java

@@ -33,7 +33,6 @@
 import io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem;
 import io.quarkus.deployment.builditem.nativeimage.RuntimeInitializedClassBuildItem;
 import io.quarkus.deployment.builditem.nativeimage.ServiceProviderBuildItem;
-import io.quarkus.keycloak.pep.runtime.PortWatcherRunTime;
 
 public class KeycloakReflectionBuildStep {
 
@@ -78,7 +77,12 @@ public void registerServiceProviders(BuildProducer<ServiceProviderBuildItem> ser
     }
 
     @BuildStep
-    RuntimeInitializedClassBuildItem runtimeInitializedClass() {
-        return new RuntimeInitializedClassBuildItem(PortWatcherRunTime.class.getName());
+    public void runtimeInit(BuildProducer<RuntimeInitializedClassBuildItem> runtimeInit) {
+        runtimeInit.produce(new RuntimeInitializedClassBuildItem("org.keycloak.common.util.BouncyIntegration"));
+        runtimeInit.produce(new RuntimeInitializedClassBuildItem("org.keycloak.common.util.PemUtils"));
+        runtimeInit.produce(new RuntimeInitializedClassBuildItem("org.keycloak.common.util.DerUtils"));
+        runtimeInit.produce(new RuntimeInitializedClassBuildItem("org.keycloak.common.util.KeystoreUtil"));
+        runtimeInit.produce(new RuntimeInitializedClassBuildItem("org.keycloak.common.util.CertificateUtils"));
+        runtimeInit.produce(new RuntimeInitializedClassBuildItem("org.keycloak.common.util.OCSPUtils"));
     }
 }