Reverted behavioral change of BELOW folder queries in the QueryService

The documentation of the UAPI QueryService stated that a "BELOW folder" condition also matches the folder itself. As this was only true for some corner cases, the implementation had been adjusted with 2304.1 to match the documentation.

Follow Section, “Reverted behavioral change of BELOW folder queries in the QueryService” for upgrade information.

(CMS-25362)

Updated Spring Security

Updated Spring Security to a version higher than 6.3.1 or 6.2.5 (see dependency updates for the concrete version). In that course the beans 'unauthenticatedRequestMatcher' and 'csrfIgnoringRequestMatcher' of type org.springframework.security.web.util.matcher.RequestMatcher have been replaced by beans of type List<RequestMatcher> named 'unauthenticatedRequestMatchers' and 'csrfIgnoringRequestMatchers' respectively. This change is only breaking for projects which have customized one of these two matcher beans. These projects must now customize the new list beans instead.

(CMS-25278)