Hey Ivan,
I have asked Sebi from the Keycloak folks to chime in. Meanwhile I would suggest to implement a ClientRequestFilter which does the adding for you.
You can see an example of such a filter here: https://github.com/RedHatInsights/custom-policies-ui-backend/blob/master/src/main/java/com/redhat/cloud/custompolicies/app/RbacRestClientRequestFilter.java#L29
You need to register that filter on your interfaces though: https://github.com/RedHatInsights/custom-policies-ui-backend/blob/master/src/main/java/com/redhat/cloud/custompolicies/app/RbacServer.java#L34
Let me know if that helps