refactor(state): merge parameter and link security

[soyuka]

Q	A
Branch?	4.1 (experimental feature changes, no bc)
Tickets	Closes #7061
License	MIT

I was working on parameters and it struck me that @KDederichs actually wrote a ParameterProvider for links that could be quite useful with all kind of parameters (not only uri variables also knowns as links, especially that a Link extends Parameter). This refactor removes a lot of code by reusing the logic of the actual parameters (that also have a security) and adding the features that were only present on Links to every parameters.

Tests left to be done:

• read a link on a query parameter
• read an iri on a query parameter
• do not throw on query parameter not found using the ReadLinkParameterProvider
• add a regression test for Link Security not compatible with Identifiers #7061
• test that the URI Variable value gets propagated in the providers (actually conflicts to much, use the $operation->getUriVariables[$key]->getValue())
• test that URI Variable (Link) also gets validated with custom constraints (mitigates [Laravel] requirements option for URI variables not enforced in custom operations #7194)

This mimics the behavior of the well-known MapEntity of symfony:

use ApiPlatform\Metadata\Get;
use ApiPlatform\State\ParameterProvider\ReadLinkParameterProvider'
use App\Entity\Author;

#[Get(
    uriTemplate: '/author/{authorId}/books`,
    uriVariables: ['authorId' => new Link(provider: ReadLinkParameterProvider::class, fromClass: Author::class)]
)]

After that if an Author is not found this throws a 404 (disable this using extraProperties: ['throw_not_found' => false] on the Link (or Parameter of any kind). Then uriVariables['authorId'] should contain the Author from the database.

This can be applied to any kind of parameters:

use ApiPlatform\Metadata\Get;
use ApiPlatform\State\ParameterProvider\ReadLinkParameterProvider'
use App\Entity\Author;

#[GetCollection(
    uriTemplate: '/authors`,
    parameters: ['author' => new QueryParameter(provider: ReadLinkParameterProvider::class, extraProperties: ['resource_class' => Author::class, 'uri_template' => '/authors/{id}'])]
)]
#[Get(
    uriTemplate: '/authors/{id}`,
)]

This also resolves #7112 in my opinion ping @joelwurtz @lyrixx

[lyrixx]

Looks promising ! Thanks