Keycloak-server: debug default bind address

Keycloak's debug mode exposes a Java debugging port to the entire network by default, allowing attackers on the same network to remotely control the server and execute malicious code.

When debug mode is enabled via --debug flag, the JDWP port binds to 0.0.0.0 instead of localhost, exposing it to network-accessible attackers. An unauthenticated attacker with network access can attach a remote debugger to achieve arbitrary code execution within the Keycloak JVM without requiring valid credentials.