LS AAI template, passing IdP filters via ACRs

Lists are read from client entry int DB. Also need to set
`proxy.blocked_idps_enabled=true` and/or
`proxy.only_allowed_idps_enabled=true` in the main config file to enable
passing these alists to proxyIdP

BREAKING CHANGE: requires database update (see v18.0.0.sql script)