Fix - Inserted device package fields limits

[Agnul97]

This PR adds limits for some fields used in the device management packages service. In this way, a reasonable upper-bound is set in order to allow clients to set the needed fields and discourage a buffer overflow attack.

[codecov]

Codecov Report

Merging #3808 (094595f) into develop (0b467de) will decrease coverage by 0.91%.
The diff coverage is 10.44%.

❗ Current head 094595f differs from pull request most recent head 2b737ad. Consider uploading reports for the commit 2b737ad to get more accurate results

@@              Coverage Diff              @@
##             develop    #3808      +/-   ##
=============================================
- Coverage      23.13%   22.22%   -0.91%     
+ Complexity        26        6      -20     
=============================================
  Files           1868     1876       +8     
  Lines          35322    35444     +122     
  Branches        2782     2783       +1     
=============================================
- Hits            8170     7879     -291     
- Misses         26841    27253     +412     
- Partials         311      312       +1     

Impacted Files	Coverage Δ
...artemis/plugin/security/MetricsSecurityPlugin.java	0.00% <0.00%> (ø)
...a/broker/artemis/plugin/security/ServerPlugin.java	0.00% <0.00%> (ø)
...ua/broker/artemis/plugin/security/context/Acl.java	0.00% <0.00%> (ø)
...temis/plugin/security/context/SecurityContext.java	0.00% <0.00%> (ø)
...eclipse/kapua/client/security/MessageListener.java	0.00% <0.00%> (ø)
...e/kapua/client/security/MetricsClientSecurity.java	0.00% <0.00%> (ø)
...ipse/kapua/client/security/metric/LoginMetric.java	0.00% <0.00%> (ø)
...se/kapua/client/security/metric/PublishMetric.java	0.00% <0.00%> (ø)
.../kapua/client/security/metric/SubscribeMetric.java	0.00% <0.00%> (ø)
...est/errors/KapuaPasswordLengthExceptionMapper.java	0.00% <0.00%> (ø)
... and 35 more

... and 46 files with indirect coverage changes

[Coduz]

Please make use of ArgumentValidator.lengthRange.
Move the checks on the service before AuthorizationService.checkPermission so we can validate any "bad request" before the Auth check and possibly save one auth check.

Actually, also packageDownloadRequest.getUri().toURL() check should be before auth check.