Please, check each commit for a more local description (title) and set of changes.
Besides actual features, there are a couple of commits dealing with fixes and small performance optimizations.

1. feat(auth): switch legacy IAuthorizationPolicy to IAuthorizationService impl [PPUC-318]

2. feat(auth): caching support for AuthorizationService [PPUC-318]

3. fix(auth): SecurityHelper.runAsAnonymous not destroying StandaloneSession [PPUC-318]

4. fix: CacheManager onLogout not properly clearing the session cache [PPUC-318]

5. feat(auth): add default log configuration for authorization classes [PPUC-318]

6. feat(auth): caching support for PentahoSystemAuthorizationActionService [PPUC-318]

   • refreshes the auth actions cache when plugin manager reloads

7. chore(auth): performance of default authorization options [PPUC-318]

8. feat(auth): endpoint and old PUC menu item to invalidate authorization cache [PPUC-318]

   • depends on i18n added to pentaho-commons-gwt

9. feat(auth): define AuthorizationService#setRootRule(.) to allow cycles [PPUC-318]

   • provided for flexibility for rules that for some not so good reason depend on the service singleton itself

10. chore(auth): logging improvements and some linting [PPUC-318]

Issue: https://hv-eng.atlassian.net/browse/PPUC-318

To be merged with:

• https://github.com/pentaho/pentaho-platform-ee/pull/1907
• feat(auth): i18n for "refresh authorization decision cache" command and menu item [PPUC-318] pentaho-commons-gwt-modules#1063
• https://github.com/pentaho/semantic-model-editor/pull/1613

Copilot Summary

This pull request introduces a new caching mechanism for authorization decisions and refactors how default authorization options are provided. It also updates Spring configuration files to wire up the new cache and related services, improves logging for authorization components, and makes a minor resource management fix in the security helper.

Authorization Decision Caching

• Added new interfaces IAuthorizationDecisionCache and IAuthorizationDecisionCacheKey to support caching of authorization decisions, following a loading cache pattern. [1] [2]
• Registered a new bean authorizationDecisionCache using MemoryAuthorizationDecisionCache in Spring configuration, with configurable expiration and size.

Service and Options Refactoring

• Refactored IAuthorizationOptions.getDefault() to return a singleton DefaultAuthorizationOptions.INSTANCE instead of an anonymous inner class, moving the implementation to a dedicated class. [1] [2] [3]

Spring Configuration Updates

• Updated beans to use the new caching authorization service (CachingAuthorizationService) and to inject the decision cache where needed, including repository and authorization policy beans. [1] [2] [3]
• Updated CSRF configuration to allow refreshing the authorization decision cache via API.

Logging Improvements

• Added a dedicated logger for org.pentaho.platform.engine.security.authorization at the ERROR level in log4j2.xml for better visibility of authorization-related issues.

Code Cleanup and Resource Management

• Improved resource management in SecurityHelper.runAsAnonymous by ensuring the anonymous session is destroyed after use. Also reordered imports for clarity. [1] [2] [3] [4]

These changes collectively improve authorization performance and maintainability, and prepare the platform for more robust security features.