Add attack endpoint

[sgnn7]

Parent issue (doesn't fully resolves it without changes in the demo): https://github.com/conjurinc/secretless-demo/issues/10

What this PR does:

• Adds a vulnerable endpoint at <server>/vulnerable that returns all env vars
• Makes the project runnable/buildable on Java 10
• Changes the build image to be based on Alpine for size