[keycloak-user] Add dynamically resolved token claim