Fix elytron-security performance issue due to missing bean scope

[loicmathieu]

The DefaultRoleDecoder has no CDI scope so it is insantiated for each request.
As it reads a propety at initialization time, this is very costly.

Adding @ApplicationScoped annotation to it lower the cost of security in one of my profile from 5.7% of frames to 1.3%

All other elytron security related beans are @ApplicationScoped and reading the code this should be safe.

[loicmathieu]

/cc @gsmet @sberyozkin @stuartwdouglas

[gsmet]

@loicmathieu could you share a profile after your change? 1.3% is still a lot IMHO.

[loicmathieu]

@gsmet 1.3% on 20ms response time is 260µs which is pretty low ;)
Profile show that all security related cost is inside elytron SecurityDomain class so out of Quarkus.
I'll send the new profile to the mailing list

[gsmet]

We have a test failure in the security native tests. Not sure if it's related.

[loicmathieu]

@gsmet I just launch the failing test locally on my branch and it passes.

I rebased on master to trigger an other CI.

Anyway, I would like @stuartwdouglas review on this one.

[loicmathieu]

@gsmet CI failed again in another test (on Java 8 only).
The previous failing native test passed!