Add auto-configuration support for spring-ldap and spring-data-ldap.

See gh-2645
See gh-7733

Update `ManagementWebSecurityAutoConfiguration` to match nested path
for insensitive actuators.

Prior to this commit, when Spring Security was on the classpath
nested paths were considered sensitive (even if the actuator
endpoint was not sensitive). i.e. when setting
`endpoints.env.sensitive=false` `/env` could be accessed without
authentication but `/env/user` could not.

Fixes gh-7868
Closes gh-7881

Closes gh-7880

Remove the spring-core dependency from the annotation processor.
(cherry-picked from 4cb7d86a)

Fixes gh-7882

This commit reverts 45d5b60f

See gh-7883

The default is now SecurityProperties.ACCESS_OVERRIDE_ORDER-1
(instead of 3), and the user can set it with
security.oauth2.resource.filter-order (as opposed to being hard
coded). The filter is provided by Spring OAuth2 so this change is
a BeanPostProcessor to call a setter on that object.

Fixes gh-5072

* pr/7877:
  Add `LoggersEndpoint` to application properties appendix

Closes gh-7877

Closes gh-7846

Update the annotation processor to be completely self contained. The
single required dependency is now "shaded" into the jar.

Fixes gh-7883

Migrate from `org.json:json` to the clean room Apache 2.0 licensed
version that was developed for Android.

Fixes gh-5929

Remove the spring-core dependency from the annotation processor.

Fixes gh-7882

Upgrade to `hibernate-validator` 5.3.4 and introduce a new
`MessageInterpolatorFactory` that creates a suitable
`MessageInterpolator` (taking into account missing EL dependencies).

Rework `ConfigurationPropertiesBindingPostProcessor` and
`ValidationAutoConfiguration` to make use of the new factory.

Fixes gh-7598

Update the `hibernate-core` managed dependency to exclude `cdi-api`.

Fixes gh-7879

* pr/7873:
  Upgrade to Spring Kafka 1.1.2

Fixes gh-7871
Closes gh-7873

Import the additional auto-configuration classes required for
`ErrorAttributes` and change the filter so that it's no longer
hidden.

Fixes gh-7867

Closes gh-7870

Closes gh-6924

This commit removes the automatic enabling of Redis as the Spring Session
store when it is available. This case is covered by a warning in `1.4.x`
that this commit removes as well.

Closes gh-7858

Closes gh-7817

* gh-7763:
  Configure Animal Sniffer to exclude jar containing Java 9 bytecode
  Upgrade to Jersey 2.25

Closes gh-7763

See gh-7763

As of 2.1 cache expiration times are to be set in seconds. This commit
migrates to the new method, yet keeping the milliseconds unit.

Closes gh-7824

Closes gh-7856

* pr/7854:
  Polish

Expose full health details if management security is disabled or
management role is present.

Fixes gh-7604
Closes gh-7852

Update documentation to align with the new role based method.

See gh-6889