[3.8] stable order for default security responses

[dgf]

refs #40222

[quarkus-bot]

Thanks for your pull request!

The title of your pull request does not follow our editorial rules. Could you have a look?

• title should preferably start with an uppercase character (if it makes sense!)

_{This message is automatically generated by a bot.}

[gsmet]

Thanks for creating this PR. I think it makes perfect sense but please create your PR against main.

We will then backport it from main to other versions by adding some labels.

I will close this PR as I think it's going to be easier for you to create a new one targeting main (just cherry-pick your commit).

[sberyozkin]

@dgf Please open a PR against main instead and propose backports by adding labels