Refactoring/opensearch security setup (#16087)

* Start datanode jersey only after ssl configuration resolved, listen to change events

* Adapted DatanodeSecuritySetupIT to work with https version of the datanode interface

* simplify hostnames in DatanodeSecuritySetupIT

* code cleanup

* added changelog

* code cleanup

* disable security plugin and perf analyzer in matrix tests opensearch

* Fixed datanode jersey service

* Fixed opensearch instance env

* Opensearch security setup refactored

* code cleanup

* removed commented out code from datanodes JerseyService

* add fqdn to the http cert in the DatanodeSecuritySetupIT

* configure truststore only if the security is enabled

* code cleanup

* reintroduced root certificate finder

* adjusted class and methods visibility of RootCertificateFinder

data-node/src/main/java/org/graylog/datanode/process/OpensearchConfiguration.java

@@ -17,6 +17,7 @@
 package org.graylog.datanode.process;
 
 import org.apache.commons.exec.OS;
+import org.graylog.datanode.configuration.variants.OpensearchSecurityConfiguration;
 import org.graylog.datanode.management.Environment;
 import org.graylog.shaded.opensearch2.org.apache.http.HttpHost;
 
@@ -35,7 +36,7 @@ public record OpensearchConfiguration(
         String authUsername,
         String authPassword,
         String clusterName, String nodeName, List<String> nodeRoles,
-        List<String> discoverySeedHosts, Map<String, String> additionalConfiguration
+        List<String> discoverySeedHosts, OpensearchSecurityConfiguration opensearchSecurityConfiguration, Map<String, String> additionalConfiguration
 ) {
     public Map<String, String> asMap() {