* pr/7544:
  Add more debug logging to DevTools

Add debug logging for the included and excluded URL patterns and
matching URLs.

Fixes gh-7478
Closes gh-7544

* pr/7634:
  Refine error message from Endpoint MVC security
  Send error with message from Endpoint MVC security

Update the error message to return less information to the client.
Details of how to disable security are now written to the log instead.

See gh-7605
See gh-7634

Update `MvcEndpointSecurityInterceptor` to that it sends an error in the
same way as Spring Security. Prior to this commit the `ErrorController`
would not handle endpoint security errors.

Fixes gh-7605
Closes gh-7634

* pr/7655:
  Polish CF management skip SSL opt-in
  Switch CF management skip SSL to opt-in

See gh-7629
See gh-7655

Change CloudFoundryActuatorAutoConfiguration so that skipping of SSL
verification is now opt-in rather than enabled by default.

Fixes gh-7629
Closes gh-7655

* pr/7672:
  Polish Kafka properties
  Support arbitrary Kafka properties

Closes gh-7672

Add support for arbitrary Kafka properties via
`spring.kafka.properties.*` and also a `spring.kafka.max.poll.records`
property.

See gh-7672

* pr/7561:
  Polish spring transaction manager properties
  Support spring transaction manager properties

Polish and update contribution so that TransactionManager properties can
be defined per technology, rather than globally.

Closes gh-7561

Add Spring TransactionManager properties to allow timeout and rollback
settings to be configured.

See gh-7561

* pr/7171:
  Make stop wait time in the launch script configurable

Create a parameter `STOP_WAIT_TIME` for the startup script
that configures the time in seconds to wait for a normal
shutdown. Because of #4941 we also send a shutdown half
way the countdown.

Fixes gh-7121

* pr/7105:
  Polish ReservoirFactory support
  Enable custom Reservoir with Dropwizard metrics

Polish Dropwizrd reservoir support including a refactor of
`ReservoirFactory` to allow reservoirs to be created based on a
metric name.

See gh-5199
See gh-7105

Uses the ReservoirFactory to customize the implementation of
the Reservoir that will be used when creating Timer and Histogram
in the DropwizardMetricServices.

Fixes gh-5199
Closes gh-7105

See gh-7681

By configuring security.oauth2.client.grantType=client_credentials the
user signals that (even in a web application) he doesn't want to use
the auth code grant (and hence session and request scoped beans for
client context).

Closes gh-7700

* pr/7639:
  Broaden LoggingApplicationListener ignores

Update `LoggingApplicationListener` to ignore all `-D` prefixed
property values. As well as catching the Azure use-case, this update
now means Spring Boot application can start when Tomcat is missing
`CATALINA_BASE\conf\logging.properties` and sets the value `-Dnop`.

Closes gh-7639

Update the fix committed in a2d46dc1 to fallback to reflection based
invocation in case earlier versions of Logback are being used.

Closes gh-7638

Update `MockitoPostProcessor` so that `@SpyBean` will automatically
pick the `@Primary` bean when multiple candidates exist.

Fixes gh-7621

Add an integration test to check that @SpyBean can be used with on a
bean definition that returns a generic type.

Closes gh-7625

See gh-7652

This commit improves ValidationAutoConfiguration so that a `Validator`
bean is exposed if JSR 303 is available. This has the side effect of
automatically enable Spring Data Couchbase's entity validation rather
than requiring to expose a `Validator` bean.

Closes gh-5178