Setup MAS (matrix-authentication-service)

The MAS is required for Matrix 2.0 SSO (opposed to the legacy OIDC integration). The MAS serves as an in-between solution to handle upstream OIDC providers with some extra's needed by Matrix 2.0 before it is fully OIDC compatible.