Export security events as OpenTelemetry Span Events

[michalvavrik]

closes: #38008

[quarkus-bot]

/cc @brunobat (opentelemetry), @radcortez (opentelemetry)

[github-actions]

🙈 The PR is closed and the preview is expired.

[brunobat]

Thanks @michalvavrik, this is looking really good.
Left some minor comments.

[quarkus-bot]

Status for workflow Quarkus Documentation CI

This is the status report for running Quarkus Documentation CI on commit 3d08150.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

⚠️ There are other workflow runs running, you probably need to wait for their status before merging.

[brunobat]

Thanks very much @michalvavrik

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 3d08150.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

---

Flaky tests - Develocity

⚙️ JVM Tests - JDK 17

📦 integration-tests/opentelemetry

✖ io.quarkus.it.opentelemetry.EndUserEnabledTest.baseTest - History

• AttributesMap{data={code.namespace=io.quarkus.it.opentelemetry.util.EndUserResource, http.route=/otel/enduser, net.protocol.name=http, http.scheme=http, http.method=GET, net.host.name=localhost, user_agent.original=Apache-HttpClient/4.5.14 (Java/17.0.10), code.function=dummy, http.target=/otel/enduser, net.host.port=8081, http.response_content_length=0, http.client_ip=127.0.0.1, http.status_code=200}, capacity=128, totalAddedValues=13} ==> expected: <testUser> but was: <null> - org.opentest4j.AssertionFailedError

org.opentest4j.AssertionFailedError: AttributesMap{data={code.namespace=io.quarkus.it.opentelemetry.util.EndUserResource, http.route=/otel/enduser, net.protocol.name=http, http.scheme=http, http.method=GET, net.host.name=localhost, user_agent.original=Apache-HttpClient/4.5.14 (Java/17.0.10), code.function=dummy, http.target=/otel/enduser, net.host.port=8081, http.response_content_length=0, http.client_ip=127.0.0.1, http.status_code=200}, capacity=128, totalAddedValues=13} ==> expected: <testUser> but was: <null>
	at org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at org.junit.jupiter.api.AssertEquals.failNotEqual(AssertEquals.java:197)
	at org.junit.jupiter.api.AssertEquals.assertEquals(AssertEquals.java:182)
	at org.junit.jupiter.api.Assertions.assertEquals(Assertions.java:1156)
	at io.quarkus.it.opentelemetry.EndUserEnabledTest.evaluateAttributes...

[michalvavrik]

/cc @sberyozkin