Add job for keystone functional protection tests

This commit introduces a new check and gate job for keystone to use the
functional RBAC tests in keystone-tempest-plugin.

These tests were derived from keystone's original protection tests, but
they use tempest and they're re-useable for people looking to validate
secure RBAC functionality in their own deployments.

Depends-On: https://review.opendev.org/#/c/686305/
Change-Id: I813cff07c20fcba1aaec6a5e68014a2a9eb9462e

.zuul.yaml

@@ -101,15 +101,6 @@
       tox_env: upgrade
       osa_test_repo: openstack/openstack-ansible-os_keystone
 
-- job:
-     name: keystone-tox-protection
-     parent: openstack-tox-py37
-     timeout: 3600
-     vars:
-       tox_envlist: protection
-       bindep_profile: test py37
-       python_version: 3.7
-
 - job:
     name: keystone-dsvm-ldap-domain-specific-driver
     parent: devstack-tempest
@@ -246,7 +237,7 @@
             irrelevant-files: *tempest-irrelevant-files
         - tempest-ipv6-only:
             irrelevant-files: *tempest-irrelevant-files
-        - keystone-tox-protection
+        - keystone-protection-functional
     gate:
       jobs:
         - keystone-dsvm-py3-functional:
@@ -259,7 +250,7 @@
             irrelevant-files: *tempest-irrelevant-files
         - tempest-ipv6-only:
             irrelevant-files: *tempest-irrelevant-files
-        - keystone-tox-protection
+        - keystone-protection-functional
     experimental:
       jobs:
         - keystone-tox-patch_cover