Migrate more security tests to new framework

[ebarlas]

Summary of tests targeted:

CustomRealmIT

• Commit: abc3aab
• Project: x-pack/qa/security-example-spi-extension
• legacy-java-rest-test → internal-java-rest-test

AbstractPasswordToolTestCase

• Commit: b74837d
• Project: x-pack/qa/security-setup-password-tests
• legacy-java-rest-test → internal-java-rest-test

SqlSecurityTestCase

• Commit: 346eb9b
• Project: x-pack/plugin/sql/qa/server/security
• legacy-java-rest-test → internal-java-rest-test
• Replaced file-based audit log reading with getCluster().getNodeLog(0, LogType.AUDIT) used elsewhere

---

SqlSecurityTestCase architecture diagram with relevant changes:

graph TB
    subgraph gradle [Gradle Build Files]
        parentBuild[server/build.gradle]
        securityBuild[security/build.gradle]
        withSslBuild[with-ssl/build.gradle]
        withoutSslBuild[without-ssl/build.gradle]
    end
    
    subgraph java [Java Test Classes]
        clusterConfig[SqlSecurityTestCluster]
        testCase[SqlSecurityTestCase]
        testClasses[16 *IT.java classes]
    end
    
    subgraph framework [Test Clusters Framework]
        elasticsearchCluster[ElasticsearchCluster]
        logType[LogType.AUDIT]
        resource[Resource.fromClasspath]
    end
    
    parentBuild -->|applies internal-java-rest-test| securityBuild
    securityBuild -->|testImplementation| framework
    withSslBuild -->|tests.ssl.enabled not set| clusterConfig
    withoutSslBuild -->|tests.ssl.enabled=false| clusterConfig
    
    clusterConfig -->|creates| elasticsearchCluster
    clusterConfig -->|loads roles.yml| resource
    testCase -->|uses| clusterConfig
    testCase -->|reads audit via| logType
    testClasses -->|extend| testCase

Loading

[elasticsearchmachine]

Pinging @elastic/es-security (Team:Security)

[ebarlas]

All non-security subprojects now use elasticsearch.internal-java-rest-test instead of conditionally using legacy-java-rest-test for security subprojects.

[ebarlas]

The security parent project's test classes directly import test-clusters types. Without this dependency, compiling src/test/java fails with:

error: package org.elasticsearch.test.cluster does not exist

[ebarlas]

This change replaces byte-offset file-based tracking with line-count tracking that uses the test cluster API.

This approach is used elsewhere. See x-pack/plugin/security/qa/audit/src/javaRestTest/java/org/elasticsearch/xpack/security/audit/AuditIT.java.