Build SecurityEventHelper lazily inside SecurityConstrainer as when static methods are secured the static interceptor is initialized during static init

[michalvavrik]

fixes: #40065

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit cca3872.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

[sberyozkin]

@michalvavrik Would you like Roberto to have a look too ?

[michalvavrik]

@michalvavrik Would you like Roberto to have a look too ?

I think it is not necessary, but if @radcortez finds a time and review this PR, I'll appreciate it. Please wait till Monday EOB in order to give Roberto time.

[michalvavrik]

hey @sberyozkin this PR could be possibly improved on main branch as we could detect beforehand whether the initialization happens during static init or runtime init and act accordingly (lazily helper or eager helper).

but considering this needs to be backported, it's better to keep changes as small as possible. I can make further improvements on the main sometimes later. my suggestion is to merge this one.