Marks public security, spaces, and encrypted saved object APIs

[jeramysoucy]

Unblocks #162149

Summary

This PR uses the access 'public' option when registering public security (authentication, authorization, etc), spaces, and encrypted saved objects HTTP APIs. #161672 changes default access of registered endpoints to 'internal', meaning that API owners have to explicitly set access: public to pass the API protection restriction. This is an intermediary step to unblock the work to enable API protection in serverless (#162149). Future work (#161337, #162087) will augment how we assign access to these APIs for our serverless products.

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 6dd712c

Failed CI Steps

• Jest Integration Tests #3

Metrics [docs]

✅ unchanged

History

• 💔 Build #144409 failed 003703a
• 💚 Build #144377 succeeded 5b0c427
• 💔 Build #144355 failed 0d47f64
• 💔 Build #144317 failed b1c6693

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

[kc13greiner]

LGTM!

Side note - there are a few route test files, e.g. roles/get_all, don't assert on the route config.options like some of the others routes' tests that were updated. Should we create a ticket to update those tests to assert the route config?

[jeramysoucy]

Closing due to misconception of requirements. See #162523