refactor(plugin-security): move the authorization middleware out of security-plugin.ts (#25223 cut 12)

refactor(plugin-security): move the authorization middleware out of security-plugin.ts (#25223 cut 12) #36282