Security Updates

This release addresses:

Changelog

#10679 - Review HTTP/2 rate control
#10547 - Cannot customize Executor on WebSocketClient
#10545 - Fixed deadlock in class initialization seen on JDK21.
#10511 - Allow session idle timeout to be configured on authentication.
#10473 - Startup Script reports ok too fast, and doesn't wait for actual start of Jetty
#10365 - Cleanup of start properties usages in jetty-10.0.x