fix: improve validation for permission "cohortdefinition:*:generate:%…

…s:get"

Refactor xalan serializer dependency placement

Feat: add permissions needed for cohort characterization and feature …

…analysis to role 15 (#176)

* feat: add the extra permissions needed for cohort characterization and feature analysis to role 15

fix: disable two unecessary global cohort-characterization permissions, incompatible with "teamprojects"
...and improve debug logs

fix: add cohort-characterization id to various methods/api calls

- This allows for the correct (more strict) permission check to find place
based on the user's permissions on the given cohort-characterization

- Also expanded the new api patterns into CohortCharacterizationPermissionSchema
and removed cohort-characterization permissions that were too broad from role 15
migration script.

* fix: remove wrong/nonsensical(?) role cohort-characterization:design:%s:get

Security updates (#169)

* dep: update xstream to 1.4.21

* dep: update commons-codes to 1.14

fix: use /auth/request instead of /auth/mapping Arborist endpoint (#166)

dep: update base runtime image to amazoncorretto:8u432-al2023-jre (#164)

Fix: add Transactional annotation to method to fix "no session" error (…

…#157)

* fix: add Transactional annotation to method to fix "no session" error

* fix: try to initialize session

Fix: restrict concept permissions in role 15 (#153)

* fix: added missing migration line to prev migration script

Adding this for completeness...

* fix: move too broad conceptset:* permissions to narrow ones

...linked to specific individual conceptsets

* fix: added missing readPermissions for conceptsets

These changes remove the need for having these permissions granted as * permission.
Instead, users now get a conceptset specific permission.

fix: remove .toLowerCase() in teamproject parsing (#146)

fix: add conceptset:*:copy-name:get permission to role 15 (#144)