Warn against unsafe static resource locations in MVC and WebFlux

[bclozel]

We already perform resource location checks in ResourceHandlerUtils, we should ensure that we log a WARN message if the application chooses a well-known unsafe location like "classpath:" or the root Servlet context for serving static resources.