[improve][broker] Add authorization operation metrics

[mattisonchao]

Motivation

Pulsar already exposes authentication metrics, but it does not expose an equivalent low-cardinality broker metric for authorization outcomes. That makes it hard to alert on authorization denials, compare failures against successful checks, or export equivalent authorization signals through both Prometheus and OpenTelemetry.

Modifications

• add broker authorization operation metrics with success and failure results
• expose the metrics through both Prometheus and OpenTelemetry
• record authorization outcomes centrally in AuthorizationService
• keep labels low-cardinality by using resource_type, operation, and result
• add focused tests for Prometheus and OpenTelemetry authorization metrics

Verifying this change

• ./gradlew --no-configuration-cache :pulsar-broker-common:test --tests org.apache.pulsar.broker.authorization.AuthorizationServiceTest :pulsar-broker:test --tests org.apache.pulsar.broker.stats.OpenTelemetryAuthorizationStatsTest

Does this pull request potentially affect one of the following parts:

• Dependencies (add or upgrade a dependency)
• The public API
• The schema
• The default values of configurations
• The threading model
• The binary protocol
• The REST endpoints
• The admin CLI options
• The metrics
• Anything that affects deployment

Documentation

• doc
• doc-required
• doc-not-needed
• doc-complete

Matching PR in forked repository

PR in forked repository: N/A

Related proposal PR: #25513