Create SqlAllAuthoritiesAuthorizationManager

[therepanic]

Closes: gh-17963

[therepanic]

I believe that the current implementation is early and we can still change it, but I have provided an example of how it might look.

By the way, I have a couple of questions.

In #17963, what was meant by:

NOTE: findAdditionalAuthorities should use a mapper object of sorts that can swap out. It can return some constants if the SQL returns true or it can look up the additional authorities in SQL.

In the current implementation, we use whenTrueMode in findAdditionalAuthorities as a signal for how to process the SQL provided to us. How would this look more correctly with a mapper object?

Also, how should we do the tests? Are there already existing tests in spring-security where we test the class that uses DataSource? Should we do an integration test?