Test operation security serialization

[kriptoburak]

Summary

• Add a Swagger Core model serialization regression for operation security alternatives.
• Assert the serialized OpenAPI keeps the anonymous requirement before the API key requirement.

Validation

• Static whitespace check passed before commit.
• Not run: this environment does not have a Java runtime.