Validate Tenant annotation is applied before authentication happened and fail if wrong tenant was used to authenticate the HTTP request

[michalvavrik]

• adds validation that @Tenant annotation is applied before authentication has begin
• authentication fails if resolved tenant is not the one selected with the @Tenant annotation
• adds JAX-RS HTTP Security Policy tests that assures it's always applied

[sberyozkin]

Thanks Michal @michalvavrik I'll look a bit later. Enjoy your weekend

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 62615a6.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

[sberyozkin]

LGTM, but minor update is like needed related to determining if the OIDC tenant config is already set.
@michalvavrik If we handle it in time for 3.10.0 then it would be OK, IMHO does not have to be exactly for 3.10.CR1

[sberyozkin]

I meant to comment only but approve, it does look good, but a minor update is needed, so please don't merge yet