OAK-11628: Make WARN/ENABLE path restriction lenient and add feature toggle to warn by default

[thomasmueller]

Feature toggle to warn by default

Adds FT_OAK-11628 (pathRestrictionWarnByDefault), off by default, which raises the default StrictPathRestriction from DISABLE to WARN at runtime — so path-filter mismatch warnings can be switched on/off without a redeploy. No behavior change when off.

Lenient path filter check for WARN/ENABLE

WARN and ENABLE now use the same lenient check, ignoring excludedPaths, so they differ only in reaction (log vs. skip index). ⚠️ Intentional behavior change: under ENABLE, a query spanning an excluded subtree now uses the index instead of being rejected.

No SPI/API change, no OSGi version bump.

See OAK-11628.

[github-actions]

Commit-Check ❌

Commit rejected by Commit-Check.                                  
                                                                  
  (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)  
   / ._. \      / ._. \      / ._. \      / ._. \      / ._. \   
 __\( C )/__  __\( H )/__  __\( E )/__  __\( C )/__  __\( K )/__ 
(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)
   || E ||      || R ||      || R ||      || O ||      || R ||   
 _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._ 
(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)
 `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´ 
                                                                  
Commit rejected.                                                  
                                                                  
Type subject_max_length check failed ==> OAK-11628: Added feature toggle to set default of invalid path restriction from DISABLED to WARN. WARN and ENABLE now ignore excludedPaths. (#3116) 
Subject must be at most 120 characters
Suggest: Keep the subject concise (<= configured max)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud