Support passing method args of RESTEasy Reactive endpoints secured with @PermissionsAllowed to permission constructor

[michalvavrik]

Description

Currently passing arguments of method secured with @PermissionsAllowed only works on security checks performed by CDI interceptors as documented here https://github.com/quarkusio/quarkus/blob/main/docs/src/main/asciidoc/security-authorize-web-endpoints-reference.adoc#permission-annotation.

As mentioned by Stuart Douglas here https://groups.google.com/g/quarkus-dev/c/ADY6k-Kwv-Y/m/83K2mCDzBwAJ, we can make it work for RESTEasy Reactive endpoints too.

Implementation ideas

• make sure there is eager authentication security check performed in EagerSecurityHandler so that only authenticated requests are handled by this "postponed" security check done after argument serialization

[quarkus-bot]

/cc @FroMage (resteasy-reactive), @Sgitario (resteasy-reactive), @geoand (resteasy-reactive), @stuartwdouglas (resteasy-reactive)

[michalvavrik]

I opened this issue so that I don't forget to do that. No actions needed from /cc, thank you.