Add OAuth2 Jackson runtime hints

[goutamadwant]

Summary

Register the Jackson runtime hints needed when OAuth2 login or client state is stored in a session in a native image.

The hints cover:

• reflective construction of Spring Security's Core, Web, WebFlux, servlet, and OAuth2 Client Jackson modules
• binding metadata for their mixins and custom deserializers
• OAuth2 client, authentication, saved-request, reactive CSRF, and factor authority types stored in sessions
• both Jackson 2 and Jackson 3, while preserving optional classpath boundaries

This follows the working reproducer from the issue and includes the reactive WebServerJackson2Module and DefaultCsrfServerTokenMixin path confirmed by the reporter.

JDK serialization hints remain tracked by spring-projects/spring-session#3103 and its active PR #3411; this change does not duplicate that work. Spring Security PR #19593 separately adds Java-serialization metadata for FactorGrantedAuthority; this change adds only the Jackson binding categories needed because OAuth2 login stores that authority in the authenticated session.

Testing

• ./gradlew :spring-security-core:test :spring-security-web:test :spring-security-oauth2-client:test --continue
• ./gradlew check
• focused runtime-hint tests rerun with --rerun-tasks --no-build-cache

Closes gh-18145