Replace the `alpine` tag with an explicit `alpine` container
version. This will dispatch on the currently available ci
runners in the upstream gitlab repository.

We prefer an explicit version so we have more control over
updates to the testing environment. This will need to be
bumped periodically.

This adds the following tags to the config file below <role>:
* <on-failed-action>:   Action to take on auth fail
* <on-failed-argument>: Argument for action on auth fail
* <on-deny-action>:     Action to take on acl deny
* <on-deny-argument>:   Argument for action on acl deny

All client alter actions are supported. The corresponding
auth does not need to have the permission for those operations.

Notes:
    Likely <on-deny-*> should be moved below <acl>, See: #2351

Closes: #1272

Closes: #2359

Closes: #2373

Closes: #2398

Closes: #2347

Closes: #738

See: #2365

Note: This is only done in operation mode strict and for JSON output
      to avoid breaking older clients.

Feature: Added JSON output for admin commands listclients, listmounts, streamlist, moveclients, and updatemetadata