adjust access control doc with quarkus authentication aspect

[lilliCao]

Implements :

• Add authentication aspect of quarkus

Questions/ Not yet addressed :

• as stated in the docu, devon-security is based on spring-security and can be used for some purposes: Preserve original request anchors after form login redirect (spring issue) and Configure permission and group. Can it be used for quarkus as well? If not what instead?
• there is some gained knowledge here around jwt+istio+keycloak. Should we create a docu in quarkus subfolder for it cause IMO it doesn't quite fit here.

Closes #https://github.com/devonfw/devon4quarkus/issues/3

[lilliCao]

* IMHO we can extract separate guides:

  * authentication via spring-security
  * authentication via quarkus
  * authorization using JEE standards such as `@RolesAllowed` with subsections for spring and quarkus specific aspects

For authentication, I rewrote the general part, as well as created 2 separated guides for spring and quarkus For authorization, I am not sure what to add. Could you clarify a little more. Thanks @hohwille