Support outbound security in MP when outside of secured scope

[tomas-langer]

Helidon 2.x

When a request to a REST client or JAX-RS client is invoked from a non-secured context (such as when using unsecured messaging), outbound security is ignored, even when explicitly configured (such as an explicit username/password for basic authentication outbound target).

Example outbound config that should work regardless of current subject:

security:
  providers:
  - http-basic-auth:
      users:
      - login: "john"
        password: "password"
        roles: ["admin"]
      outbound:
      - name: "internal"
        hosts: ["localhost"]
        username: "internal-user"
        password: "XXX"

In MP, we should use the security configured in CDI to do outbound for unsecured requests (or invocations that do not have a Helidon Context available).